last executing test programs: 5m5.489972541s ago: executing program 2 (id=366): add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 5m5.336869863s ago: executing program 2 (id=370): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = socket$rxrpc(0x21, 0x2, 0xa) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/185, 0xb9}, {&(0x7f00000008c0)=""/199, 0xc7}, {&(0x7f0000000b00)=""/226, 0xe2}], 0x3, &(0x7f0000000d00)=""/232, 0xe8}, 0xffffffff}], 0x2, 0x140, 0x0) 5m5.085614947s ago: executing program 2 (id=374): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x40000000, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000005c0), 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$can_raw(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x24000895) 5m3.389618665s ago: executing program 2 (id=383): sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ipvlan1\x00', 0x0}) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4) syz_io_uring_setup(0x1244, 0x0, &(0x7f0000000400), &(0x7f0000010200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030038000b12d25a80648c2594f90224fc600d0c034002000000053582c10a153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xc}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x120b, &(0x7f0000002300)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x5, 0xb5, &(0x7f0000000740)=""/181, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000004000086dd60fca33f00080000fe800000000000000000000000000000fe8000000000000000000000000000aa0000000500000000"], 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$key(0xf, 0x3, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r7 = syz_pidfd_open(r6, 0x0) syz_pidfd_open(0x0, 0x0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) setns(r7, 0x10000000) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="00000000010000000000584d0fb0bdaf7db45100", @ANYRES32=r1, @ANYBLOB], 0x50) 5m2.303432642s ago: executing program 2 (id=391): add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000001280), 0x6) 5m1.833723379s ago: executing program 2 (id=394): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0xffffffffff600000, 0x1, 0x1}}, 0x40) syz_genetlink_get_family_id$nl80211(0x0, r4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000840)={0x1b0, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x81, 0xa8, @random="d36edb7486eccd6d4d43c27fd7a0504aec831692b614ab36f794139dc161ea92e61a9119aeccea41b84a375945682b3e4eed6d90e88831089b8935989575c582e02d2aafadd4e6eb1d4384969972027dda806ba1cb85107a088fbcd2f360f4ce5735f2015b984949a06f223dd05890a476a6c9e084d05263e8b4d7963f"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x4f, 0xa8, @random="87f8bed09e10002990723760d825f89de18985a6fba2e43e814cc40a610457451466b42964f3bff2604bbdbe8edadd821646cb91ff91c859fc55005d243f6a3cf08bf44163482462994018"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x78, 0xa8, @random="6647552279820cde473bd163ff50f1c0368a1570fc24d222111e4d21c23f87fea92adbadb83002848790b880cc8f7ab1a73e77622d1edc2381d5692bf9f4c3f1917490b20c99827a04b03a2c16851a71d060c3f4d628038dc10b9cf9c329662558c1ec58485d4134c1da4631801633325cb9a6e2"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x5f}, 0x18) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 5m1.611089403s ago: executing program 32 (id=394): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0xffffffffff600000, 0x1, 0x1}}, 0x40) syz_genetlink_get_family_id$nl80211(0x0, r4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000840)={0x1b0, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x81, 0xa8, @random="d36edb7486eccd6d4d43c27fd7a0504aec831692b614ab36f794139dc161ea92e61a9119aeccea41b84a375945682b3e4eed6d90e88831089b8935989575c582e02d2aafadd4e6eb1d4384969972027dda806ba1cb85107a088fbcd2f360f4ce5735f2015b984949a06f223dd05890a476a6c9e084d05263e8b4d7963f"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x4f, 0xa8, @random="87f8bed09e10002990723760d825f89de18985a6fba2e43e814cc40a610457451466b42964f3bff2604bbdbe8edadd821646cb91ff91c859fc55005d243f6a3cf08bf44163482462994018"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x78, 0xa8, @random="6647552279820cde473bd163ff50f1c0368a1570fc24d222111e4d21c23f87fea92adbadb83002848790b880cc8f7ab1a73e77622d1edc2381d5692bf9f4c3f1917490b20c99827a04b03a2c16851a71d060c3f4d628038dc10b9cf9c329662558c1ec58485d4134c1da4631801633325cb9a6e2"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x5f}, 0x18) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 4m51.230883698s ago: executing program 4 (id=576): bpf$MAP_CREATE(0x0, 0x0, 0x48) add_key(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) unshare(0xa000200) unshare(0x20060400) 4m51.156982629s ago: executing program 4 (id=577): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x40000000, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x24000895) 4m50.988182352s ago: executing program 4 (id=582): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x79af, 0x8, 0x8000, 0x400250}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 4m50.970108102s ago: executing program 4 (id=584): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000180100002020782500000000002020207b1a83ff00000000bfa100000000000007010000f8ff926490e71a8ab6ffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r3, r0}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b40), 0xffffffffffffffff) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_u}]}}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', r5}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0xca, &(0x7f0000000700)=""/202, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 4m50.737287296s ago: executing program 4 (id=590): add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 4m35.789957973s ago: executing program 4 (id=760): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000000600000000028290081e949b93897bc3b0000000040007d01ff020000000000000000000000000001"], 0xfdef) 4m35.783566983s ago: executing program 33 (id=760): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000000600000000028290081e949b93897bc3b0000000040007d01ff020000000000000000000000000001"], 0xfdef) 42.527344914s ago: executing program 0 (id=3571): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5", 0x5c}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed14c3322630ae8e710fb68299cbb5accee8813185c77248ddec7b5688599f1bfccbec448bc6ce5c139c2095da22c9d7edf7bfa1392c76a", 0x9f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000005c0)="33ca667d02", 0x5}, {&(0x7f0000000b40)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde", 0x35}, {&(0x7f0000001a80)="d61f2c7a6ddbff16a09972b62284a63c170b9a6ec5cd29dfa047b76a9a0eeb4055c9dd2244e47c59e557c459c397cd02eb261fc7d521b1f2e95c3ce17726db0d3236a6d3b52d3f066554d84292329c8a6f034ff8d85d61dcf7ae508c5925903fb1feb7d07fe481313ad476131cf19514d6c77835e9cf82df2f153d9b82985da3e260fc6942d18345ac61b2958886a77e2a2726097d1888a25bee0fdec661520a057f8559f17e462bdf938f7f2303447bfaa744d3891372a825c63e83ff21650af922eaac39ab491cec071d31eebd6526d7a8ddd052d30beb962aeca814ad530c1413e502b92f3e51eaf75ec5b595b19e4945a1a821a8c47f804465f9e04d0ec9aff13036fe4f3a56b324e9ea795cc89d0f30433f3fa8aa7cc4dd93197840d644c6e48329c266316227ea917708cde40163a6b092d3c722a71e9f21255315cb87a74916d56da0479e7e8865b289fc8095a8477e7fee5eda0c55ec6d53c7aac85f6171717935832962f6db7889683497f3f5a4aa6c6af16908cc4c", 0x17a}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 42.495777165s ago: executing program 0 (id=3572): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000400)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000080)={0x0, 0x3000040, 0x8, 0x1b, 0xfe, &(0x7f00000000c0)="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"}) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRESHEX=r5, @ANYBLOB="e9ad45be4b3459738537c2a5b9c7c2546f8107cf343a8aea9e38ac8306200c4e5ad01cfb550167e2812676abf2828f2a2bb5bfe68e164ea1c93a56e88957d3e8b3b0ad5e9056538e0f635bf2908368d43b87ad3d0c94a9cd858a1082f56a9c9ffa16ab027f31c7c5b46c93341a5d695071c5f33ece15f69f69b4a61430b99af75f6fa4dca4c54fc365e73247069c22d5ed75bf999756d7de6f73c430c90d8c6c043222d35ca08103daca3ffc31c2331c02ce67187987cde117992bb7032750ff16c041db13affd58f10e6fdc890cd4332a18f3e1209292928e0be19f7bfa1f3c224008a3dc56fcb0173c1aaba48c4f72433bc8", @ANYRES64=r8, @ANYRESDEC=r3], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x1}, 0x18) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003"], 0x48}}, 0x40000) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}}, 0x0, 0x0, 0x38, 0x0, "0f424a2bc651a9f11381328af8daf6f4bd2827984afeb6b627cea1ba22d1af57aa193c5024c9e8b22a8796a538ed893952a1aa555418ba1b4d0bc0712c028ec32a9bc2fb29b52d39e8626bc90abcc02a"}, 0xd8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmsg$can_raw(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@can={{0x4}, 0x3, 0x0, 0x0, 0x0, "36ecd11f0f515361"}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x48000) sendmmsg$inet6(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x400000000000118, 0x4000040) getdents64(r0, 0x0, 0x0) 42.472219595s ago: executing program 0 (id=3573): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x1, 0x0, 0x9}, {0x10000040, 0x4, 0x10009, 0x5}], 0x10, 0xfff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00160000000000fdfbffff00800000000000002e15d10b02904c8fffdd77b96dfd84e9a5bfe27c14915563a73fbd667dfadee9b6b3a6f6ad8e1e911275a1673cb621b7569042b223be4ee1521b82e5989757e510a45f537e66fc50d25ae566a4bb0ee631272cb96603e2ec939e4ae6628c821773454a1d377f2e69c855ce7fb67c3e5eac90a504e12a272b5197bc5614b90649ec63543f16aadd00abdd117374fa46fd91ff1e522bf7b887eee2aac2473a386d1c699053a10551cb778d981c70e051b64eb359f3af3d0d0b3c8f9668e5dba0d4669f63efe5ab84b7975da0b84654c09a005b4cc694", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x200214, &(0x7f0000000000)=ANY=[], 0x11, 0x25d, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118) mkdirat(r6, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000240)='\x00', 0x0) 40.639168534s ago: executing program 0 (id=3588): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x800}, 0x18) clock_gettime(0x0, &(0x7f0000001300)={0x0, 0x0}) futex_waitv(&(0x7f0000000f00)=[{0x3, &(0x7f00000001c0)=0x1, 0x2}, {0x8, &(0x7f0000000200)=0x7, 0x2}, {0x4, &(0x7f0000000300)=0x7cfbdc1c, 0x2}, {0x2, &(0x7f0000000340)=0x2, 0x2}, {0x200, &(0x7f0000000380)=0xbb, 0x82}, {0xfffffffffffffff2, &(0x7f00000003c0)=0x2, 0x82}, {0x381, &(0x7f0000000400)=0x4, 0x82}, {0x6, &(0x7f0000000440)=0x8, 0x2}, {0x10, &(0x7f0000000480)=0x7, 0x2}, {0x8, &(0x7f0000000540)=0x3, 0x82}, {0x3b, &(0x7f0000000580)=0x7, 0x2}, {0x5, &(0x7f00000005c0)=0x6, 0x82}, {0xfffffffffffffffb, &(0x7f0000000600)=0x8}, {0xfff, &(0x7f0000000640)=0x2, 0x82}, {0x3, &(0x7f0000000680)=0x5, 0x2}, {0x80000000, &(0x7f00000006c0)=0x9, 0x82}, {0x80, &(0x7f0000000700)=0x2, 0x2}, {0x1000, &(0x7f0000000740), 0x82}, {0x2, &(0x7f0000000780)=0xfc4, 0x2}, {0x7f, &(0x7f00000007c0)=0x4, 0x2}, {0x4, &(0x7f0000000940)=0x4}, {0x5, &(0x7f0000000980)=0x2, 0x2}, {0x987e, &(0x7f00000009c0)=0xdd, 0x2}, {0x0, &(0x7f0000000a00)=0x9, 0x82}, {0x4, &(0x7f0000000a40), 0x82}, {0x3, &(0x7f0000000a80)=0x4, 0x2}, {0x0, &(0x7f0000000ac0)=0x2, 0x82}, {0x62, &(0x7f0000000b00)=0xa65, 0x82}, {0x1, &(0x7f0000000b40)=0x5, 0x82}, {0x10, &(0x7f0000000b80)=0x4, 0x82}, {0x8, &(0x7f0000000bc0)=0x9, 0x82}, {0xd27b, &(0x7f0000000c40)=0x6, 0x82}, {0x7, &(0x7f0000000c80)=0x4, 0x82}, {0x6, &(0x7f0000000cc0), 0x82}, {0x7, &(0x7f0000000d00)=0x3, 0x82}, {0x10000, &(0x7f0000000d40)=0x4, 0x82}, {0x9, &(0x7f0000000d80)=0x2, 0x82}, {0x5, &(0x7f0000000dc0)=0x4, 0x2}, {0x7, &(0x7f0000000e00)=0x100, 0x2}, {0x1, &(0x7f0000000e40)=0x9, 0x82}, {0xfffffffffffffc61, &(0x7f0000000e80)=0x4}, {0x6, 0x0, 0x2}], 0x2a, 0x0, &(0x7f0000001340)={r1, r2+60000000}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r3, 0x0, 0x51}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r3, 0x0, 0x10000000000000}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8afeff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x1020, &(0x7f0000001200)=""/4128, 0x40efd, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x3, 0x9) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7fffffffffffffff) 40.309085759s ago: executing program 0 (id=3593): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="c520d6910451b3", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa20000000008000000b70400000085000000030000009500"/65], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) close(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffff8}, 0x18) socket$packet(0x11, 0x1, 0x300) socket$packet(0x11, 0xa, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x100, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xa, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701000300000000a5df856c2dbac5dcaec88c6f004481487285450000002d44076d4fddac1263396f56f87ef3bb8addb579c623a6cb68ec766f3c3a5750a127c3597b29372be2f35a759f4d19b88c6d33a4c0145e37270aafbf554f28fbb5a585bf993cd33bd6364ebea154ca2ab36d1dfa0d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='fib6_table_lookup\x00', r8}, 0x18) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) writev(r9, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000200)="03", 0x1}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffdf4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x14, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r11}, 0x10) 40.234297041s ago: executing program 0 (id=3596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) r5 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r5, 0x2, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r7 = socket(0x18, 0x4, 0x0) connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r7, r6, 0x0, 0x8) 25.113386691s ago: executing program 34 (id=3596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) r5 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r5, 0x2, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r7 = socket(0x18, 0x4, 0x0) connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r7, r6, 0x0, 0x8) 3.863144939s ago: executing program 1 (id=4019): syz_emit_ethernet(0x17, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@llc={0x4, {@snap={0xaa, 0xab, "6b1e", "26739c"}}}}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000015c0)=@newqdisc={0x5a8, 0x24, 0x3fe3aa0262d8c783, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x578, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0xcf43, 0x0, 0x2, 0x10, 0xfe}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0xc, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0x9de5, 0x1, 0x15, 0x1b, 0x20, 0x8}}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x5}}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}, @TCA_CHOKE_STAB={0x104, 0x2, "9356cb8cfd2b647af54b8aaf7cef5776f3f8e3f1d4b0cbd4e07cd1e71fc0721da804bc41eaf29adc67605a2b636097993d1cbac231f4e5b40e3f45e077a0f4aeead1a778da7c546ee966dd8c1b2e2297076763faea61bec51ae90b78153546d24ce02399ba740ca041d2f010221d2aa23b8dd987d96895256ff7905c5b11b8d594afde5b405b25339bc42503046a3b82c5b2c482726dd9b91aebefabf82b55c54cf0e17973e5cd4aba3a77be7a63e681cb44892e353692e30f4f79d5b9b864ec1634ff77de767d8bd6ca55e7ebb0daf102cd2cafce7d8765a2d4f8444614dcada8e9ac51c33eef0d075149c254a84d893c9a9cb5a58f0f692243ee42cc73997a"}]}}]}, 0x5a8}}, 0x0) socket$kcm(0x29, 0x0, 0x0) pause() 3.279793808s ago: executing program 6 (id=4022): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x103940) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r6, 0x0, 0x80, 0x6) write(r6, &(0x7f0000003300)="ac", 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r3, 0x0, 0x0) r7 = accept4$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c, 0x80800) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x16b0, 0x0, 0x1480, 0x1268, 0x1128, 0x1480, 0x15e0, 0x15e0, 0x15e0, 0x15e0, 0x15e0, 0x6, &(0x7f0000000140), {[{{@ipv6={@mcast2, @local, [0xffffff00, 0x0, 0xff, 0xff], [0xff000000, 0xff000000, 0x0, 0xff000000], 'bond_slave_0\x00', 'sit0\x00', {}, {}, 0x5e, 0x3, 0x2, 0x4}, 0x0, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup/syz1\x00', 0x9, {0x9}}}, @common=@eui64={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2d}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0x26, 0x23, 0x8}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0x0, 0xffffff00, 0xffffffff], 'pimreg0\x00', 'ip6gretap0\x00', {}, {}, 0x2c, 0x8, 0x0, 0x50}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0xa}}}, {{@ipv6={@mcast1, @local, [0x0, 0xff000000, 0xff, 0xff], [0x0, 0xffffff00, 0xff, 0xffffffff], 'ip6_vti0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x88, 0x6, 0x2, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x31, 0x2b}}}, {{@ipv6={@local, @mcast1, [0xffffff00, 0xc0cf6fcc0015453f, 0xff], [0xff000000], 'dummy0\x00', 'pim6reg0\x00', {0xff}, {}, 0x21, 0x6, 0x3, 0x4}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x2, 0x0, [0x7, 0x3, 0xc, 0x9c, 0x1, 0x7ff, 0xffff, 0x8b8, 0x4, 0x1000, 0x2, 0x2, 0x8000, 0x1e, 0x2fbd], 0x6}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@private0, 0x3, 0x5, 0x3ff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1710) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) getpid() socket$pppoe(0x18, 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000001900), 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000001980)={0x0, 0x7}, &(0x7f00000019c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001a00)={r8, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x4c28, 0x154, 0x7, 0x2, 0x40, 0x2, 0x8}, 0x9c) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[], 0xff2e) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) r11 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r11, &(0x7f0000000440)={'#! ', './file0'}, 0xb) 3.027816112s ago: executing program 7 (id=4028): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44810402}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) setgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x44, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x0, 0x3, r6}, @val={0xc, 0x99, {0x8d88, 0x18}}}}, [@NL80211_ATTR_KEY_SEQ={0x0, 0xa, "36fb1a711ab64c577e3c58"}, @NL80211_ATTR_KEY_SEQ={0x0, 0xa, "5e2b9ddf15d7064d3ee8795abe4268"}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) memfd_create(0x0, 0x5) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x2, 0x0, 0x0, 0x0) 2.976928673s ago: executing program 1 (id=4030): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x4008800) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="c8000000647793d697dcda84fb7be8a9c6a14f2a30eefde01d983ef3b458edefa121cbe757635d6c288a211ed30afa6755aa95827ae6a0f3962b279de04002b6e957284b5457d76ea7a93615e2b7aff744116b9d8f40cf9e519baab5642ed01f835199d1a4d0ed83588266505d6dd5352ab8f392200128ed6b29", @ANYRES16=r1, @ANYBLOB="000429bd7000fbdbdf250a00000008000500ff07000008000500090000001400018008000b007369700008000800000000000800060000000000080006000c0000003c0002800800060008000000080007004e080000060002004e20000008000300020000000800070004000000080008005b4e000006000e004e2200004400018014000300fc0000000000000000000000000000011400030000000000000000000000ffffac1414bb0600010000000000060002005e0000000800050000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000800}, 0x881) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@const={0x1}, @var={0x9, 0x0, 0x0, 0xe, 0x1, 0x3}]}, {0x0, [0x30, 0x30, 0x30, 0xb4c48361ab2f39cd, 0x2e, 0x30]}}, &(0x7f0000000100)=""/196, 0x3c, 0xc4, 0x1, 0x4, 0x10000}, 0x28) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000800000000800000000000000000000000000000000000000000000000000000030000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa010000000000000000000000000000002b00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001008250db55ea46e325000000000000003200000000000000e00000010000000000000000000000000000800003000000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000200010000000000bf0a000000000000fe8000000000000000000000000000aa000004d46c"], 0x23c}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r6, 0xff, 0x7, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071002b000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x0, &(0x7f0000000400)}) 2.902257634s ago: executing program 7 (id=4031): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) unshare(0x8000000) r1 = mq_open(&(0x7f00000000c0)='${ \x00', 0x840, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x5, 0x4}]}) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.895863785s ago: executing program 5 (id=4032): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x1, 0x0, 0x9}, {0x10000040, 0x4, 0x10009, 0x5}], 0x10, 0xfff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00160000000000fdfbffff00800000000000002e15d10b02904c8fffdd77b96dfd84e9a5bfe27c14915563a73fbd667dfadee9b6b3a6f6ad8e1e911275a1673cb621b7569042b223be4ee1521b82e5989757e510a45f537e66fc50d25ae566a4bb0ee631272cb96603e2ec939e4ae6628c821773454a1d377f2e69c855ce7fb67c3e5eac90a504e12a272b5197bc5614b90649ec63543f16aadd00abdd117374fa46fd91ff1e522bf7b887eee2aac2473a386d1c699053a10551cb778d981c70e051b64eb359f3af3d0d0b3c8f9668e5dba0d4669f63efe5ab84b7975da0b84654c09a005b4cc694", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x200214, &(0x7f0000000000)=ANY=[], 0x11, 0x25d, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118) mkdirat(r6, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000240)='\x00', 0x0) 2.819135496s ago: executing program 3 (id=4033): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x8000000) r2 = mq_open(&(0x7f00000000c0)='${ \x00', 0x840, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.818308176s ago: executing program 3 (id=4034): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa40}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa40}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) io_setup(0x2, &(0x7f0000002400)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) utimes(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xdf8bd000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) (async) socket$inet6(0xa, 0x3, 0x8000000003c) syz_emit_ethernet(0x66, &(0x7f0000000b80)=ANY=[@ANYBLOB="ffffffffffff64870300d3d608004500001403000000006c907800000000000000000420880b0000000000000800000086dd080088be00000000100000000100000000000000080021eb00000000200080000200000000000000000000000800655800000000"], 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)="711f664eb50cd5279c17da770c", 0x4c}, 0x1, 0x0, 0x0, 0x805}, 0x4044004) (async) sendmsg$802154_raw(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)="711f664eb50cd5279c17da770c", 0x4c}, 0x1, 0x0, 0x0, 0x805}, 0x4044004) 2.277832944s ago: executing program 6 (id=4035): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000b40)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5b", 0x34}, {&(0x7f0000001a80)="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", 0x2c5}], 0x2}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.273125274s ago: executing program 6 (id=4036): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (fail_nth: 3) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, &(0x7f0000000180)) 2.265660934s ago: executing program 3 (id=4037): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x1, 0x0, 0x9}, {0x10000040, 0x4, 0x10009, 0x5}], 0x10, 0xfff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00160000000000fdfbffff00800000000000002e15d10b02904c8fffdd77b96dfd84e9a5bfe27c14915563a73fbd667dfadee9b6b3a6f6ad8e1e911275a1673cb621b7569042b223be4ee1521b82e5989757e510a45f537e66fc50d25ae566a4bb0ee631272cb96603e2ec939e4ae6628c821773454a1d377f2e69c855ce7fb67c3e5eac90a504e12a272b5197bc5614b90649ec63543f16aadd00abdd117374fa46fd91ff1e522bf7b887eee2aac2473a386d1c699053a10551cb778d981c70e051b64eb359f3af3d0d0b3c8f9668e5dba0d4669f63efe5ab84b7975da0b84654c09a005b4cc694", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x200214, &(0x7f0000000000)=ANY=[], 0x11, 0x25d, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118) mkdirat(r5, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r5, &(0x7f0000000200)='./file0\x00', r3, &(0x7f0000000240)='\x00', 0x0) 2.147911096s ago: executing program 1 (id=4038): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f0000000300)='./file0\x00', 0x20) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 2.092490927s ago: executing program 6 (id=4039): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44810402}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) setgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x44, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x0, 0x3, r6}, @val={0xc, 0x99, {0x8d88, 0x18}}}}, [@NL80211_ATTR_KEY_SEQ={0x0, 0xa, "36fb1a711ab64c577e3c58"}, @NL80211_ATTR_KEY_SEQ={0x0, 0xa, "5e2b9ddf15d7064d3ee8795abe4268"}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) memfd_create(0x0, 0x5) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x2, 0x0, 0x0, 0x0) 1.91525818s ago: executing program 5 (id=4040): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x180, 0x0, 0x200, 0x0, 0x0, 0x250, 0x2e8, 0x2e8, 0x250, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x180, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0xffff, 0xf5f}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @empty, [], [], 'ip6_vti0\x00', 'veth0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x380) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f0000", 0xc7}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r7 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x600, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 1.87178579s ago: executing program 7 (id=4041): socket$inet6(0xa, 0x800, 0x6) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000), 0xfd55) sendto$inet6(r0, &(0x7f0000000500)="d5", 0x1, 0x2000c851, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000e80)={0x0, 0x3}, 0x8) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x90000) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000080)=0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x6000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, &(0x7f0000000180)) 1.825773041s ago: executing program 6 (id=4042): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x2680, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000003d00)=""/102398, 0x18ffe}, {&(0x7f00000006c0)=""/67, 0x43}, {&(0x7f0000000780)=""/159, 0x9f}, {&(0x7f0000000840)=""/174, 0xae}], 0x4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2ac}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000680)='net_dev_xmit_timeout\x00', r0, 0x0, 0x6}, 0x18) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000480)='max_dir_size_kb', 0x0, 0xffffffffffffffff) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) 1.779911462s ago: executing program 5 (id=4043): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x300, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}}}, 0x24}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000b00)='f2fs_destroy_extent_tree\x00', r1, 0x0, 0x1}, 0x18) r2 = socket(0xb, 0x6, 0x6d0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0xffffffff}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000001811000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x10001, 0x2602) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='cachefiles_ondemand_fd_release\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) write$tun(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000240)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}]}, 0x2, 0x476, &(0x7f0000000540)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000180), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.625962525s ago: executing program 7 (id=4044): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548fc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee364dad078fc88d17cbde37a2270f90a60afe8548f4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd1045a5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e0000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.100291363s ago: executing program 5 (id=4045): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) eventfd2(0x6, 0x80801) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085006d0000001801000020696c2500000000002020097b1af8ff00000000bfa1e830f1e4000007010000b8ffff176b44c4fda8"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x1d, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b000000861e00000000000008000000010000008c3bfaf17c2552066630879abcb58cfd97f19e946896581b45d594445e04930aff13a7f1cece7e24a42a242afb85cf65faed32d27578517861c23d55c2f079925c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff3, 0xffff}, {0x0, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x44044) 1.099766383s ago: executing program 1 (id=4046): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x2680, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000003d00)=""/102398, 0x18ffe}, {&(0x7f00000006c0)=""/67, 0x43}, {&(0x7f0000000780)=""/159, 0x9f}, {&(0x7f0000000840)=""/174, 0xae}], 0x4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[], 0x2ac}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000680)='net_dev_xmit_timeout\x00', r0, 0x0, 0x6}, 0x18) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000480)='max_dir_size_kb', 0x0, 0xffffffffffffffff) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) 909.230076ms ago: executing program 6 (id=4047): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') syz_open_dev$usbfs(0x0, 0x74, 0x101301) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r4, &(0x7f0000000780)={'#! ', './file0'}, 0xb) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) msgget$private(0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 900.417786ms ago: executing program 5 (id=4048): socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) bind$rds(r1, &(0x7f00000003c0)={0x2, 0x4e24, @local}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0xb}}, './file0\x00'}) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000280)={{0x2c6740d4, 0x7fff}, 0x100, './file0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 787.239138ms ago: executing program 7 (id=4049): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x8}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 675.88829ms ago: executing program 7 (id=4050): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) creat(0x0, 0x0) mknod$loop(&(0x7f00000010c0)='./file1\x00', 0x1000, 0x0) set_mempolicy(0x6005, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000004c0)='io_uring_register\x00', r0, 0x0, 0xffffffff00000000}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0x18, 0x3, 0x7fff, 0x7, 0x4002, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50) 567.385911ms ago: executing program 3 (id=4051): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(0x0, 0x74, 0x101301) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r3, &(0x7f0000000780)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000480)}) msgget$private(0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 469.011823ms ago: executing program 3 (id=4052): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x8000000) r2 = mq_open(&(0x7f00000000c0)='${ \x00', 0x840, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 452.130513ms ago: executing program 3 (id=4053): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000b40)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5b", 0x34}, {&(0x7f0000001a80)="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", 0x2c5}], 0x2}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 224.747767ms ago: executing program 1 (id=4054): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)=0x7ffd) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e0000006500000050000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 69.93379ms ago: executing program 1 (id=4055): r0 = syz_io_uring_setup(0x3b52, &(0x7f0000000480)={0x0, 0x5883, 0x1000, 0xffffffff, 0x575}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x10007b0f, 0x45ac, 0x20, 0x0, 0x0) 0s ago: executing program 5 (id=4056): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x4008800) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x4000800}, 0x881) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@const={0x1}, @var={0x9, 0x0, 0x0, 0xe, 0x1, 0x3}]}, {0x0, [0x30, 0x30, 0x30, 0xb4c48361ab2f39cd, 0x2e, 0x30]}}, &(0x7f0000000100)=""/196, 0x3c, 0xc4, 0x1, 0x4, 0x10000}, 0x28) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000800000000800000000000000000000000000000000000000000000000000000030000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa010000000000000000000000000000002b00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001008250db55ea46e325000000000000003200000000000000e00000010000000000000000000000000000800003000000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000200010000000000bf0a000000000000fe8000000000000000000000000000aa000004d46c"], 0x23c}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r6, 0xff, 0x7, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071002b000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x0, &(0x7f0000000400)}) ioctl$TCSETSW(0xffffffffffffffff, 0x5434, 0x0) kernel console output (not intermixed with test programs): 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 325.475079][T13637] RSP: 002b:00007f9ab4947030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 325.475112][T13637] RAX: ffffffffffffffda RBX: 00007f9ab6505fa0 RCX: 00007f9ab62dd3bc [ 325.475126][T13637] RDX: 000000000000000f RSI: 00007f9ab49470a0 RDI: 000000000000000a [ 325.475140][T13637] RBP: 00007f9ab4947090 R08: 0000000000000000 R09: 0000000000000000 [ 325.475153][T13637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.475170][T13637] R13: 0000000000000000 R14: 00007f9ab6505fa0 R15: 00007fff48d03be8 [ 325.475187][T13637] [ 325.538942][T12906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.589236][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 325.624079][T13646] loop5: detected capacity change from 0 to 128 [ 325.701037][T13646] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 325.701061][T13646] FAT-fs (loop5): Filesystem has been set read-only [ 325.701087][T13646] bio_check_eod: 4262 callbacks suppressed [ 325.701100][T13646] syz.5.3476: attempt to access beyond end of device [ 325.701100][T13646] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 325.701212][T13646] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 325.701233][T13646] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 325.701256][T13646] syz.5.3476: attempt to access beyond end of device [ 325.701256][T13646] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 325.735152][T13648] lo speed is unknown, defaulting to 1000 [ 325.807131][T13655] can0: slcan on ttyS3. [ 325.810784][T13648] lo speed is unknown, defaulting to 1000 [ 325.855444][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 325.962665][T13647] can0 (unregistered): slcan off ttyS3. [ 326.226057][T13675] pim6reg1: entered promiscuous mode [ 326.386008][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 326.625759][ T29] kauditd_printk_skb: 731 callbacks suppressed [ 326.625771][ T29] audit: type=1326 audit(1753543490.172:42494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz.3.3494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 326.657639][ T29] audit: type=1326 audit(1753543490.172:42495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz.3.3494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 326.681230][ T29] audit: type=1326 audit(1753543490.182:42496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz.3.3494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 326.707071][ T29] audit: type=1326 audit(1753543490.182:42497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz.3.3494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 326.723804][T13702] loop3: detected capacity change from 0 to 1024 [ 326.730699][ T29] audit: type=1326 audit(1753543490.182:42498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz.3.3494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 326.730778][ T29] audit: type=1326 audit(1753543490.182:42499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz.3.3494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 326.730836][ T29] audit: type=1400 audit(1753543490.182:42500): avc: denied { append } for pid=13700 comm="syz.3.3494" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 326.730864][ T29] audit: type=1326 audit(1753543490.182:42501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz.3.3494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 326.730924][ T29] audit: type=1326 audit(1753543490.182:42502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz.3.3494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 326.730950][ T29] audit: type=1326 audit(1753543490.182:42503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz.3.3494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 326.879895][T13702] EXT4-fs: Ignoring removed nobh option [ 326.885589][T13702] EXT4-fs: Ignoring removed bh option [ 326.967881][T13702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.350232][T13717] pim6reg1: entered promiscuous mode [ 327.504127][T11673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.553145][T13724] pim6reg1: entered promiscuous mode [ 327.691916][T13741] loop6: detected capacity change from 0 to 256 [ 327.788676][T13749] loop3: detected capacity change from 0 to 128 [ 328.299290][T13758] infiniband syz1: set active [ 328.304116][T13758] infiniband syz1: added bridge0 [ 328.362838][T13758] RDS/IB: syz1: added [ 328.366995][T13758] smc: adding ib device syz1 with port count 1 [ 328.385958][T13758] smc: ib device syz1 port 1 has pnetid [ 328.734175][T13763] loop1: detected capacity change from 0 to 1024 [ 328.772693][T13763] EXT4-fs: Ignoring removed nobh option [ 328.778375][T13763] EXT4-fs: Ignoring removed bh option [ 328.829377][T13763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.525440][ C1] net_ratelimit: 2 callbacks suppressed [ 329.525457][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 329.564430][T13763] __nla_validate_parse: 5 callbacks suppressed [ 329.564442][T13763] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3513'. [ 329.589573][T13763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3513'. [ 329.600384][T13763] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3513'. [ 329.772338][T13780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3518'. [ 329.841902][T13778] pim6reg1: entered promiscuous mode [ 329.963888][T12714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.987723][T13790] pim6reg1: entered promiscuous mode [ 330.051788][T13796] loop3: detected capacity change from 0 to 128 [ 330.565652][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 330.950348][T13810] loop6: detected capacity change from 0 to 1024 [ 331.350942][T13817] loop5: detected capacity change from 0 to 512 [ 331.467193][T13817] EXT4-fs: Ignoring removed orlov option [ 331.497519][T13817] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 331.561026][T13822] pim6reg1: entered promiscuous mode [ 331.570817][T13817] EXT4-fs (loop5): orphan cleanup on readonly fs [ 331.585975][T13817] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3531: bg 0: block 248: padding at end of block bitmap is not set [ 331.605403][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 331.633210][T13817] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3531: Failed to acquire dquot type 1 [ 331.637561][ T29] kauditd_printk_skb: 480 callbacks suppressed [ 331.637614][ T29] audit: type=1326 audit(1753543495.192:42982): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13824 comm="syz.6.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f102be9a9 code=0x7ffc0000 [ 331.647742][T13817] EXT4-fs (loop5): 1 truncate cleaned up [ 331.665406][ T29] audit: type=1326 audit(1753543495.192:42983): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13824 comm="syz.6.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f102be9a9 code=0x7ffc0000 [ 331.735398][ T29] audit: type=1326 audit(1753543495.272:42984): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13824 comm="syz.6.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f102be9a9 code=0x7ffc0000 [ 331.759467][ T29] audit: type=1326 audit(1753543495.272:42985): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13824 comm="syz.6.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f102be9a9 code=0x7ffc0000 [ 331.783410][ T29] audit: type=1326 audit(1753543495.272:42986): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13824 comm="syz.6.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f102be9a9 code=0x7ffc0000 [ 331.807355][ T29] audit: type=1326 audit(1753543495.272:42987): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13824 comm="syz.6.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f102be9a9 code=0x7ffc0000 [ 331.831435][ T29] audit: type=1326 audit(1753543495.272:42988): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13824 comm="syz.6.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f3f102be9a9 code=0x7ffc0000 [ 331.856047][ T29] audit: type=1326 audit(1753543495.272:42989): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13824 comm="syz.6.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f102be9a9 code=0x7ffc0000 [ 331.880211][ T29] audit: type=1326 audit(1753543495.272:42990): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13824 comm="syz.6.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f3f102be9a9 code=0x7ffc0000 [ 331.904173][ T29] audit: type=1326 audit(1753543495.272:42991): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13824 comm="syz.6.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f102be9a9 code=0x7ffc0000 [ 332.015751][T13817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 332.040405][T13817] EXT4-fs: Ignoring removed orlov option [ 332.047825][T13817] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 332.089457][T13817] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 332.138589][T13817] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.3531: Abort forced by user [ 332.156950][T13830] pim6reg1: entered promiscuous mode [ 332.173093][T13817] EXT4-fs (loop5): Remounting filesystem read-only [ 332.179700][T13817] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 332.180463][T13836] FAULT_INJECTION: forcing a failure. [ 332.180463][T13836] name failslab, interval 1, probability 0, space 0, times 0 [ 332.202566][T13836] CPU: 0 UID: 0 PID: 13836 Comm: syz.3.3536 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 332.202592][T13836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.202603][T13836] Call Trace: [ 332.202608][T13836] [ 332.202651][T13836] __dump_stack+0x1d/0x30 [ 332.202670][T13836] dump_stack_lvl+0xe8/0x140 [ 332.202687][T13836] dump_stack+0x15/0x1b [ 332.202701][T13836] should_fail_ex+0x265/0x280 [ 332.202800][T13836] should_failslab+0x8c/0xb0 [ 332.202819][T13836] kmem_cache_alloc_node_noprof+0x57/0x320 [ 332.202846][T13836] ? __alloc_skb+0x101/0x320 [ 332.202932][T13836] __alloc_skb+0x101/0x320 [ 332.202958][T13836] netlink_alloc_large_skb+0xba/0xf0 [ 332.202992][T13836] netlink_sendmsg+0x3cf/0x6b0 [ 332.203027][T13836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.203050][T13836] __sock_sendmsg+0x142/0x180 [ 332.203078][T13836] ____sys_sendmsg+0x31e/0x4e0 [ 332.203100][T13836] ___sys_sendmsg+0x17b/0x1d0 [ 332.203149][T13836] __x64_sys_sendmsg+0xd4/0x160 [ 332.203171][T13836] x64_sys_call+0x2999/0x2fb0 [ 332.203265][T13836] do_syscall_64+0xd2/0x200 [ 332.203281][T13836] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 332.203310][T13836] ? clear_bhb_loop+0x40/0x90 [ 332.203330][T13836] ? clear_bhb_loop+0x40/0x90 [ 332.203347][T13836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.203443][T13836] RIP: 0033:0x7f5107c5e9a9 [ 332.203456][T13836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.203477][T13836] RSP: 002b:00007f51062bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.203565][T13836] RAX: ffffffffffffffda RBX: 00007f5107e85fa0 RCX: 00007f5107c5e9a9 [ 332.203579][T13836] RDX: 0000000020000010 RSI: 0000200000000080 RDI: 0000000000000005 [ 332.203593][T13836] RBP: 00007f51062bf090 R08: 0000000000000000 R09: 0000000000000000 [ 332.203607][T13836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.203621][T13836] R13: 0000000000000000 R14: 00007f5107e85fa0 R15: 00007ffeb6bf7348 [ 332.203642][T13836] [ 332.224691][T13817] ext4 filesystem being remounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 332.478073][T13838] IPv6: Can't replace route, no match found [ 332.481203][T13817] SELinux: syz.5.3531 (13817) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 332.538166][T12906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.548425][T13842] FAULT_INJECTION: forcing a failure. [ 332.548425][T13842] name failslab, interval 1, probability 0, space 0, times 0 [ 332.562848][T13842] CPU: 0 UID: 0 PID: 13842 Comm: syz.3.3539 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 332.562873][T13842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.562943][T13842] Call Trace: [ 332.562949][T13842] [ 332.562955][T13842] __dump_stack+0x1d/0x30 [ 332.563024][T13842] dump_stack_lvl+0xe8/0x140 [ 332.563046][T13842] dump_stack+0x15/0x1b [ 332.563063][T13842] should_fail_ex+0x265/0x280 [ 332.563089][T13842] should_failslab+0x8c/0xb0 [ 332.563133][T13842] kmem_cache_alloc_node_noprof+0x57/0x320 [ 332.563183][T13842] ? __alloc_skb+0x101/0x320 [ 332.563320][T13842] __alloc_skb+0x101/0x320 [ 332.563345][T13842] tipc_msg_create+0x47/0x230 [ 332.563416][T13842] ? obj_cgroup_charge_account+0x122/0x1a0 [ 332.563449][T13842] ? should_fail_ex+0x30/0x280 [ 332.563478][T13842] ? xas_load+0x413/0x430 [ 332.563564][T13842] tipc_group_proto_xmit+0xb7/0x2f0 [ 332.563596][T13842] tipc_group_cong+0x270/0x2a0 [ 332.563627][T13842] tipc_group_bc_cong+0xe5/0x110 [ 332.563670][T13842] tipc_send_group_bcast+0x1ad/0x6c0 [ 332.563702][T13842] ? __pfx_woken_wake_function+0x10/0x10 [ 332.563725][T13842] __tipc_sendmsg+0x186/0x1b00 [ 332.563744][T13842] ? avc_has_perm+0xd3/0x150 [ 332.563781][T13842] ? selinux_socket_sendmsg+0x175/0x1b0 [ 332.563817][T13842] ? _raw_spin_unlock_bh+0x36/0x40 [ 332.563845][T13842] ? lock_sock_nested+0x112/0x140 [ 332.563869][T13842] tipc_sendmsg+0x3e/0x60 [ 332.563946][T13842] ? __pfx_tipc_sendmsg+0x10/0x10 [ 332.563970][T13842] __sock_sendmsg+0x142/0x180 [ 332.564003][T13842] ____sys_sendmsg+0x31e/0x4e0 [ 332.564026][T13842] ___sys_sendmsg+0x17b/0x1d0 [ 332.564087][T13842] __x64_sys_sendmsg+0xd4/0x160 [ 332.564109][T13842] x64_sys_call+0x2999/0x2fb0 [ 332.564211][T13842] do_syscall_64+0xd2/0x200 [ 332.564229][T13842] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 332.564253][T13842] ? clear_bhb_loop+0x40/0x90 [ 332.564276][T13842] ? clear_bhb_loop+0x40/0x90 [ 332.564347][T13842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.564366][T13842] RIP: 0033:0x7f5107c5e9a9 [ 332.564379][T13842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.564457][T13842] RSP: 002b:00007f51062bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.564477][T13842] RAX: ffffffffffffffda RBX: 00007f5107e85fa0 RCX: 00007f5107c5e9a9 [ 332.564490][T13842] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 332.564504][T13842] RBP: 00007f51062bf090 R08: 0000000000000000 R09: 0000000000000000 [ 332.564517][T13842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.564528][T13842] R13: 0000000000000000 R14: 00007f5107e85fa0 R15: 00007ffeb6bf7348 [ 332.564587][T13842] [ 332.645406][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 332.779841][T13856] loop1: detected capacity change from 0 to 1024 [ 332.861567][T13855] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3542'. [ 332.870903][T13856] EXT4-fs: Ignoring removed nobh option [ 332.878006][T13856] EXT4-fs: Ignoring removed bh option [ 332.883686][T13855] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3542'. [ 332.898705][T13856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.915126][T13855] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3542'. [ 332.931554][T13864] loop6: detected capacity change from 0 to 1024 [ 332.934866][T13851] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3545'. [ 332.938620][T13864] EXT4-fs: Ignoring removed nobh option [ 332.938793][T13864] EXT4-fs: Ignoring removed bh option [ 332.952031][T13855] syz_tun: entered allmulticast mode [ 332.962817][T13864] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.969117][T13854] syz_tun: left allmulticast mode [ 332.982961][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3545'. [ 332.991993][T13851] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3545'. [ 333.016023][ T5608] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.075702][T13873] IPv6: Can't replace route, no match found [ 333.098216][T13877] loop6: detected capacity change from 0 to 512 [ 333.104897][T13877] EXT4-fs: Ignoring removed orlov option [ 333.122069][T13877] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 333.146519][T13877] EXT4-fs (loop6): orphan cleanup on readonly fs [ 333.153668][T13871] pim6reg1: entered promiscuous mode [ 333.162709][T13877] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3553: bg 0: block 248: padding at end of block bitmap is not set [ 333.185766][T13877] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3553: Failed to acquire dquot type 1 [ 333.208085][T13877] EXT4-fs (loop6): 1 truncate cleaned up [ 333.218897][T13877] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 333.261138][T13877] EXT4-fs: Ignoring removed orlov option [ 333.279477][T13877] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 333.311178][T13877] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 333.325871][T13886] loop5: detected capacity change from 0 to 512 [ 333.339740][T13886] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.3557: casefold flag without casefold feature [ 333.366102][T13886] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3557: couldn't read orphan inode 15 (err -117) [ 333.378159][T13877] EXT4-fs error (device loop6): __ext4_remount:6736: comm syz.6.3553: Abort forced by user [ 333.397622][T13877] EXT4-fs (loop6): Remounting filesystem read-only [ 333.404222][T13877] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 333.424813][T13886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.442602][T13877] ext4 filesystem being remounted at /572/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 333.464596][T13877] SELinux: syz.6.3553 (13877) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 333.526581][ T5608] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.536360][T12906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.575262][T12714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.620609][T13903] netlink: zone id is out of range [ 333.627331][T13903] netlink: zone id is out of range [ 333.632880][T13903] netlink: zone id is out of range [ 333.638064][T13903] netlink: zone id is out of range [ 333.643197][T13903] netlink: zone id is out of range [ 333.648376][T13903] netlink: zone id is out of range [ 333.739063][T13917] SELinux: syz.0.3570 (13917) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 333.751393][T13915] pim6reg1: entered promiscuous mode [ 333.898805][T13929] loop5: detected capacity change from 0 to 1024 [ 333.922066][T13929] EXT4-fs: Ignoring removed nobh option [ 333.927703][T13929] EXT4-fs: Ignoring removed bh option [ 333.963277][T13929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.353747][T13948] loop1: detected capacity change from 0 to 512 [ 334.390362][T13948] EXT4-fs: Ignoring removed orlov option [ 334.725402][ C1] net_ratelimit: 10 callbacks suppressed [ 334.725428][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 334.905014][T13952] loop3: detected capacity change from 0 to 512 [ 334.941796][T13948] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 334.956262][T12906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.966344][T13948] EXT4-fs (loop1): orphan cleanup on readonly fs [ 334.973241][T13952] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.3583: casefold flag without casefold feature [ 334.993733][T13948] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3581: bg 0: block 248: padding at end of block bitmap is not set [ 335.005166][T13954] pim6reg1: entered promiscuous mode [ 335.010884][T13948] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3581: Failed to acquire dquot type 1 [ 335.024958][T13952] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3583: couldn't read orphan inode 15 (err -117) [ 335.027277][T13948] EXT4-fs (loop1): 1 truncate cleaned up [ 335.054731][T13952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.654965][T11673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.665059][T13948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 335.688471][T13948] EXT4-fs: Ignoring removed orlov option [ 335.698752][T13948] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 335.709337][T13948] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 335.728270][T13948] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.3581: Abort forced by user [ 335.753131][T13965] pim6reg1: entered promiscuous mode [ 335.764975][T13948] EXT4-fs (loop1): Remounting filesystem read-only [ 335.771589][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 335.778650][T13948] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 335.790317][T13948] ext4 filesystem being remounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 335.809205][T13948] SELinux: syz.1.3581 (13948) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 335.862785][T13981] loop6: detected capacity change from 0 to 1024 [ 335.876749][T12714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.888383][T13981] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 335.899385][T13981] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 335.910761][T13981] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 335.923604][T13981] EXT4-fs (loop6): invalid journal inode [ 335.929528][T13983] __nla_validate_parse: 8 callbacks suppressed [ 335.929542][T13983] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3591'. [ 335.953058][T13981] EXT4-fs (loop6): can't get journal size [ 335.961987][T13981] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #3: comm syz.6.3590: blocks 2-2 from inode overlap system zone [ 335.988388][T13981] EXT4-fs (loop6): failed to initialize system zone (-117) [ 335.997384][T13981] EXT4-fs (loop6): mount failed [ 336.013706][T13990] random: crng reseeded on system resumption [ 336.027999][T13990] Unrecognized hibernate image header format! [ 336.034108][T13990] PM: hibernation: Image mismatch: architecture specific data [ 336.084390][T13995] loop6: detected capacity change from 0 to 512 [ 336.107117][T13995] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.3597: casefold flag without casefold feature [ 336.120505][T13995] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.3597: couldn't read orphan inode 15 (err -117) [ 336.132892][T13995] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.171751][ T5608] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.220080][T14003] pim6reg1: entered promiscuous mode [ 336.286468][T14009] pim6reg1: entered promiscuous mode [ 336.334272][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3604'. [ 336.440206][T14023] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3609'. [ 336.471285][T14025] loop6: detected capacity change from 0 to 1024 [ 336.478560][T14025] EXT4-fs: Ignoring removed nobh option [ 336.484402][T14025] EXT4-fs: Ignoring removed bh option [ 336.500353][T14025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.527322][ T5608] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.580965][T14034] loop6: detected capacity change from 0 to 512 [ 336.589232][T14034] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.3611: casefold flag without casefold feature [ 336.604825][T14034] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.3611: couldn't read orphan inode 15 (err -117) [ 336.621747][T14034] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.662141][ T5608] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.748233][ T29] kauditd_printk_skb: 734 callbacks suppressed [ 336.748302][ T29] audit: type=1326 audit(1753543500.302:43722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14036 comm="syz.3.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 336.805396][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 336.810897][ T29] audit: type=1326 audit(1753543500.362:43723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.3.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5107bfab89 code=0x7ffc0000 [ 336.838725][ T29] audit: type=1326 audit(1753543500.362:43724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.3.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 336.862519][ T29] audit: type=1326 audit(1753543500.362:43725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.3.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 336.900586][ T29] audit: type=1326 audit(1753543500.452:43726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.1.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545bcee9a9 code=0x7ffc0000 [ 336.926303][ T29] audit: type=1326 audit(1753543500.452:43727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.1.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545bcee9a9 code=0x7ffc0000 [ 336.973334][ T29] audit: type=1326 audit(1753543500.452:43728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.1.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f545bcee9a9 code=0x7ffc0000 [ 336.999228][ T29] audit: type=1326 audit(1753543500.452:43729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.1.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545bcee9a9 code=0x7ffc0000 [ 337.023148][ T29] audit: type=1326 audit(1753543500.452:43730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.1.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545bcee9a9 code=0x7ffc0000 [ 337.048627][ T29] audit: type=1326 audit(1753543500.512:43731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.1.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f545bcee9a9 code=0x7ffc0000 [ 337.085043][T14041] pim6reg1: entered promiscuous mode [ 337.110487][T14048] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3617'. [ 337.653510][T14067] loop3: detected capacity change from 0 to 512 [ 337.660216][T14067] EXT4-fs: Ignoring removed orlov option [ 337.668078][T14067] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 337.677337][T14067] EXT4-fs (loop3): orphan cleanup on readonly fs [ 337.684245][T14067] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3624: bg 0: block 248: padding at end of block bitmap is not set [ 337.701014][T14067] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3624: Failed to acquire dquot type 1 [ 337.712842][T14067] EXT4-fs (loop3): 1 truncate cleaned up [ 337.722075][T14067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 337.737687][T14067] EXT4-fs: Ignoring removed orlov option [ 337.743523][T14067] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 337.752236][T14067] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 337.777823][T14067] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.3624: Abort forced by user [ 337.788075][T14067] EXT4-fs (loop3): Remounting filesystem read-only [ 337.794649][T14067] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 337.804933][T14067] ext4 filesystem being remounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 337.817967][T14067] SELinux: syz.3.3624 (14067) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 337.846334][T11673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.855412][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 337.894225][T14073] syz.3.3626 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 338.055213][T14077] cgroup: No subsys list or none specified [ 338.116606][T14079] pim6reg1: entered promiscuous mode [ 338.185145][T14082] syzkaller0: entered promiscuous mode [ 338.190762][T14082] syzkaller0: entered allmulticast mode [ 338.435260][T14091] pim6reg1: entered promiscuous mode [ 338.489163][T14095] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3633'. [ 338.526699][T14097] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3634'. [ 338.794651][T14103] loop6: detected capacity change from 0 to 512 [ 338.816490][T14103] EXT4-fs: Ignoring removed orlov option [ 338.876327][T14108] loop5: detected capacity change from 0 to 128 [ 338.885751][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 339.435513][T14122] pim6reg1: entered promiscuous mode [ 339.601661][T14125] loop3: detected capacity change from 0 to 1024 [ 339.777579][T14103] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 339.786273][T14125] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 339.797268][T14125] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 339.824898][T14103] EXT4-fs (loop6): orphan cleanup on readonly fs [ 339.837130][T14103] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3636: bg 0: block 248: padding at end of block bitmap is not set [ 339.900663][T14125] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 339.925388][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 339.968899][T14103] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3636: Failed to acquire dquot type 1 [ 339.990964][T14125] EXT4-fs (loop3): invalid journal inode [ 340.006763][T14125] EXT4-fs (loop3): can't get journal size [ 340.013156][T14103] EXT4-fs (loop6): 1 truncate cleaned up [ 340.033137][T14125] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.3645: blocks 2-2 from inode overlap system zone [ 340.047752][T14103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 340.078274][T14103] EXT4-fs: Ignoring removed orlov option [ 340.084199][T14125] EXT4-fs (loop3): failed to initialize system zone (-117) [ 340.118665][T14103] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 340.128980][T14125] EXT4-fs (loop3): mount failed [ 340.147000][T14103] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 340.172586][T14134] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3647'. [ 340.181923][T14134] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3647'. [ 340.191483][T14103] EXT4-fs error (device loop6): __ext4_remount:6736: comm syz.6.3636: Abort forced by user [ 340.203951][T14134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3647'. [ 340.218099][T14103] EXT4-fs (loop6): Remounting filesystem read-only [ 340.224636][T14103] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 340.253340][T14103] ext4 filesystem being remounted at /591/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 340.296959][T14103] SELinux: syz.6.3636 (14103) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 340.346115][ T5608] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.432634][T14142] loop3: detected capacity change from 0 to 2048 [ 340.454767][T14142] EXT4-fs: quotafile must be on filesystem root [ 340.538943][T14147] netlink: 332 bytes leftover after parsing attributes in process `syz.6.3649'. [ 340.568439][T14147] netlink: 'syz.6.3649': attribute type 9 has an invalid length. [ 340.602944][T14147] loop6: detected capacity change from 0 to 512 [ 340.718735][T14155] pim6reg1: entered promiscuous mode [ 340.854778][T14166] loop3: detected capacity change from 0 to 512 [ 340.864850][T14166] EXT4-fs: Ignoring removed orlov option [ 340.890202][T14166] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 340.906061][T14166] EXT4-fs (loop3): orphan cleanup on readonly fs [ 340.920288][T14166] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3660: bg 0: block 248: padding at end of block bitmap is not set [ 340.939608][T14166] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3660: Failed to acquire dquot type 1 [ 340.965435][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 340.981558][T14166] EXT4-fs (loop3): 1 truncate cleaned up [ 341.010352][T14166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 341.065022][T14166] EXT4-fs: Ignoring removed orlov option [ 341.083322][T14166] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 341.097519][T14166] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 341.108020][T14171] __nla_validate_parse: 3 callbacks suppressed [ 341.108035][T14171] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3661'. [ 341.127595][T14171] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3661'. [ 341.128100][T14166] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.3660: Abort forced by user [ 341.148936][T14166] EXT4-fs (loop3): Remounting filesystem read-only [ 341.155640][T14166] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 341.164462][T14166] ext4 filesystem being remounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 341.175186][T14173] loop6: detected capacity change from 0 to 1024 [ 341.183679][T14171] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3661'. [ 341.201362][T14166] SELinux: syz.3.3660 (14166) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 341.202012][T14173] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 341.228041][T14173] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 341.273816][T14173] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 341.284979][T14173] EXT4-fs (loop6): invalid journal inode [ 341.314922][T14173] EXT4-fs (loop6): can't get journal size [ 341.344935][T11673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.365464][T14173] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #3: comm syz.6.3662: blocks 2-2 from inode overlap system zone [ 341.446788][T14183] loop1: detected capacity change from 0 to 128 [ 341.497124][T14173] EXT4-fs (loop6): failed to initialize system zone (-117) [ 341.520364][T14173] EXT4-fs (loop6): mount failed [ 341.805455][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 341.805473][ T29] audit: type=1326 audit(1753543505.342:44052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14184 comm="syz.5.3666" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ab62de9a9 code=0x0 [ 342.005440][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 342.376383][ T29] audit: type=1326 audit(1753543505.912:44053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14172 comm="syz.6.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f102be9a9 code=0x7ffc0000 [ 342.400056][ T29] audit: type=1326 audit(1753543505.912:44054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14172 comm="syz.6.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f102be9a9 code=0x7ffc0000 [ 342.423834][ T29] audit: type=1326 audit(1753543505.912:44055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14172 comm="syz.6.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f102be9a9 code=0x7ffc0000 [ 342.447430][ T29] audit: type=1326 audit(1753543505.912:44056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14172 comm="syz.6.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f102be9a9 code=0x7ffc0000 [ 342.471080][ T29] audit: type=1326 audit(1753543505.912:44057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14172 comm="syz.6.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f102be9a9 code=0x7ffc0000 [ 342.494774][ T29] audit: type=1326 audit(1753543505.912:44058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14172 comm="syz.6.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f102be9a9 code=0x7ffc0000 [ 342.518457][ T29] audit: type=1326 audit(1753543505.912:44059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14172 comm="syz.6.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f102be9a9 code=0x7ffc0000 [ 342.542124][ T29] audit: type=1326 audit(1753543505.912:44060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14172 comm="syz.6.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f102be9a9 code=0x7ffc0000 [ 342.565759][ T29] audit: type=1326 audit(1753543505.912:44061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14172 comm="syz.6.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f102be9a9 code=0x7ffc0000 [ 342.729462][T14195] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3668'. [ 342.776125][T14190] pim6reg1: entered promiscuous mode [ 342.999285][T14202] pim6reg1: entered promiscuous mode [ 343.055414][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 343.078731][T14206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3671'. [ 343.138857][T14211] loop5: detected capacity change from 0 to 512 [ 343.147238][T14211] EXT4-fs: Ignoring removed orlov option [ 343.154078][T14211] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 343.208153][T14211] EXT4-fs (loop5): orphan cleanup on readonly fs [ 343.217922][T14211] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3675: bg 0: block 248: padding at end of block bitmap is not set [ 343.267334][T14211] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3675: Failed to acquire dquot type 1 [ 343.305566][T14211] EXT4-fs (loop5): 1 truncate cleaned up [ 343.320192][T14211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 343.368411][T14211] EXT4-fs: Ignoring removed orlov option [ 343.377202][T14211] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 343.407956][T14211] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 343.446857][T14211] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.3675: Abort forced by user [ 343.474975][T14211] EXT4-fs (loop5): Remounting filesystem read-only [ 343.481654][T14211] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 343.492061][T14211] ext4 filesystem being remounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 343.508128][T14211] SELinux: syz.5.3675 (14211) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 343.532929][T12906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.697979][T14226] loop5: detected capacity change from 0 to 512 [ 343.756113][T14226] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.3678: casefold flag without casefold feature [ 343.772498][T14226] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3678: couldn't read orphan inode 15 (err -117) [ 343.788098][T14226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.831340][T12906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.883832][T14231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.892037][T14231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.900583][T14231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.908179][T14231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.952003][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3680'. [ 343.962287][T14232] IPVS: Error joining to the multicast group [ 343.996216][T14235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3681'. [ 344.057024][T14237] pim6reg1: entered promiscuous mode [ 344.085409][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 344.117538][T14239] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3683'. [ 344.208743][T14242] pim6reg1: entered promiscuous mode [ 344.361105][T14249] pim6reg1: entered promiscuous mode [ 344.420958][T14245] lo speed is unknown, defaulting to 1000 [ 344.451334][T14257] loop3: detected capacity change from 0 to 512 [ 344.483554][T14257] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.3687: casefold flag without casefold feature [ 344.498599][T14257] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3687: couldn't read orphan inode 15 (err -117) [ 344.518620][T14257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.542291][T14245] lo speed is unknown, defaulting to 1000 [ 344.657336][ T3763] bridge_slave_1: left allmulticast mode [ 344.663129][ T3763] bridge_slave_1: left promiscuous mode [ 344.669773][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.688741][T11673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.705318][ T3763] bridge_slave_0: left allmulticast mode [ 344.711708][ T3763] bridge_slave_0: left promiscuous mode [ 344.718135][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.730752][T14266] loop3: detected capacity change from 0 to 512 [ 344.744284][T14266] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.3690: casefold flag without casefold feature [ 344.767798][T14266] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3690: couldn't read orphan inode 15 (err -117) [ 344.790103][T14266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.977385][ T3763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.987861][ T3763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.997964][ T3763] bond0 (unregistering): Released all slaves [ 345.051962][T11673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.066906][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3693'. [ 345.096447][ T3763] tipc: Left network mode [ 345.125429][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 345.172951][T14277] pim6reg1: entered promiscuous mode [ 345.188676][T14245] chnl_net:caif_netlink_parms(): no params data found [ 345.201177][ T3763] hsr_slave_0: left promiscuous mode [ 345.207057][ T3763] hsr_slave_1: left promiscuous mode [ 345.212966][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.261439][ T3763] team0 (unregistering): Port device team_slave_1 removed [ 345.274051][ T3763] team0 (unregistering): Port device team_slave_0 removed [ 345.361800][T14281] pim6reg1: entered promiscuous mode [ 345.459782][T14285] pim6reg1: entered promiscuous mode [ 345.522914][T14245] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.530114][T14245] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.539484][T14245] bridge_slave_0: entered allmulticast mode [ 345.547712][T14245] bridge_slave_0: entered promiscuous mode [ 345.554649][T14245] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.561766][T14245] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.571965][T14245] bridge_slave_1: entered allmulticast mode [ 345.580156][T14245] bridge_slave_1: entered promiscuous mode [ 345.609086][T14245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.629290][ T3763] IPVS: stop unused estimator thread 0... [ 345.669173][T14245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.769033][T14245] team0: Port device team_slave_0 added [ 345.789901][T14245] team0: Port device team_slave_1 added [ 345.851575][T14303] loop1: detected capacity change from 0 to 128 [ 346.175409][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 346.766320][T14245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.773310][T14245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.800948][T14245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.864731][ T29] kauditd_printk_skb: 398 callbacks suppressed [ 346.864745][ T29] audit: type=1326 audit(1753543510.412:44458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14322 comm="syz.5.3707" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ab62de9a9 code=0x0 [ 346.930939][ T29] audit: type=1326 audit(1753543510.452:44459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14324 comm="syz.3.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 346.954702][ T29] audit: type=1326 audit(1753543510.452:44460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14324 comm="syz.3.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 346.978491][ T29] audit: type=1326 audit(1753543510.452:44461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14324 comm="syz.3.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 347.002179][ T29] audit: type=1326 audit(1753543510.452:44462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14324 comm="syz.3.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 347.025848][ T29] audit: type=1326 audit(1753543510.452:44463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14324 comm="syz.3.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 347.049408][ T29] audit: type=1326 audit(1753543510.452:44464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14324 comm="syz.3.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 347.073050][ T29] audit: type=1326 audit(1753543510.452:44465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14324 comm="syz.3.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 347.096679][ T29] audit: type=1326 audit(1753543510.462:44466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14324 comm="syz.3.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 347.120252][ T29] audit: type=1326 audit(1753543510.462:44467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14324 comm="syz.3.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 347.215456][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 347.375929][T14245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.382913][T14245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.410372][T14245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.419068][T14337] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3709'. [ 347.466176][T14330] pim6reg1: entered promiscuous mode [ 347.525531][T14245] hsr_slave_0: entered promiscuous mode [ 347.531770][T14245] hsr_slave_1: entered promiscuous mode [ 347.541875][T14245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.549522][T14245] Cannot create hsr debugfs directory [ 347.578989][T14341] loop3: detected capacity change from 0 to 1024 [ 347.586171][T14341] EXT4-fs: Ignoring removed nobh option [ 347.591822][T14341] EXT4-fs: Ignoring removed bh option [ 347.655599][T14341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.680790][T14341] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3710'. [ 347.690359][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3710'. [ 347.699278][T14341] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3710'. [ 347.864605][T14350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 347.993144][T14357] pim6reg1: entered promiscuous mode [ 348.068589][T14245] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 348.093155][T14245] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 348.113659][T14245] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 348.132436][T14245] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 348.212387][T14245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.232174][T14245] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.245407][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 348.253906][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.261062][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.300742][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.307834][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.510958][T14245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 348.522604][T14245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.584784][T11673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.636539][T14377] loop1: detected capacity change from 0 to 128 [ 349.285419][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 349.583470][T14245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.208626][T14403] loop5: detected capacity change from 0 to 512 [ 350.222851][T14403] EXT4-fs: Ignoring removed orlov option [ 350.250861][T14403] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 350.270830][T14403] EXT4-fs (loop5): orphan cleanup on readonly fs [ 350.278173][T14403] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3723: bg 0: block 248: padding at end of block bitmap is not set [ 350.292745][T14410] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 350.294233][T14403] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3723: Failed to acquire dquot type 1 [ 350.299315][T14410] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 350.299410][T14410] vhci_hcd vhci_hcd.0: Device attached [ 350.310790][T14245] veth0_vlan: entered promiscuous mode [ 350.329061][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 350.338937][T14245] veth1_vlan: entered promiscuous mode [ 350.339578][T14403] EXT4-fs (loop5): 1 truncate cleaned up [ 350.359954][T14245] veth0_macvtap: entered promiscuous mode [ 350.367581][T14245] veth1_macvtap: entered promiscuous mode [ 350.378811][T14245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.388007][T14245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.396490][T14245] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.405217][T14245] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.407709][T14403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.414135][T14245] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.435156][T14245] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.454596][T14410] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 350.461142][T14410] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 350.470068][T14410] vhci_hcd vhci_hcd.0: Device attached [ 350.507635][T14419] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 350.512678][T14403] EXT4-fs: Ignoring removed orlov option [ 350.514184][T14419] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 350.520149][T14403] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 350.529146][T14419] vhci_hcd vhci_hcd.0: Device attached [ 350.556822][ T9] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 350.557150][T14403] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 350.603992][T14410] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 350.621467][T14426] loop6: detected capacity change from 0 to 1024 [ 350.628247][T14403] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.3723: Abort forced by user [ 350.631139][T14426] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 350.650675][T14426] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 350.652962][T14419] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(13) [ 350.666978][T14419] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 350.674471][T14419] vhci_hcd vhci_hcd.0: Device attached [ 350.686583][T14426] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 350.695460][T14403] EXT4-fs (loop5): Remounting filesystem read-only [ 350.699833][T14426] EXT4-fs (loop6): invalid journal inode [ 350.703212][T14403] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 350.711052][T14426] EXT4-fs (loop6): can't get journal size [ 350.723671][T14426] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #3: comm syz.6.3726: blocks 2-2 from inode overlap system zone [ 350.743016][T14426] EXT4-fs (loop6): failed to initialize system zone (-117) [ 350.743804][T14403] ext4 filesystem being remounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.760963][T14426] EXT4-fs (loop6): mount failed [ 350.767921][T14410] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(12) [ 350.774544][T14410] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 350.782260][T14410] vhci_hcd vhci_hcd.0: Device attached [ 350.792121][T14410] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 350.808752][T14403] SELinux: syz.5.3723 (14403) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 350.854015][T14410] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(18) [ 350.860803][T14410] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 350.869742][T14410] vhci_hcd vhci_hcd.0: Device attached [ 350.900545][T14410] loop1: detected capacity change from 0 to 512 [ 350.916443][T14410] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 350.932871][T12906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.946708][T14410] EXT4-fs (loop1): 1 truncate cleaned up [ 350.954829][T14410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.062029][T14431] vhci_hcd: connection closed [ 351.062203][T14435] vhci_hcd: connection closed [ 351.062218][T14414] vhci_hcd: connection closed [ 351.067136][T14412] vhci_hcd: connection reset by peer [ 351.073825][ T3763] vhci_hcd: stop threads [ 351.078176][T14428] vhci_hcd: connection closed [ 351.081818][ T3763] vhci_hcd: release socket [ 351.081834][ T3763] vhci_hcd: disconnect device [ 351.103839][T14420] vhci_hcd: connection closed [ 351.119199][ T3763] vhci_hcd: stop threads [ 351.128452][ T3763] vhci_hcd: release socket [ 351.132899][ T3763] vhci_hcd: disconnect device [ 351.138288][ T3763] vhci_hcd: stop threads [ 351.142564][ T3763] vhci_hcd: release socket [ 351.147095][ T3763] vhci_hcd: disconnect device [ 351.169504][T14439] infiniband syz!: set active [ 351.174256][T14439] infiniband syz!: added team_slave_0 [ 351.189850][ T3763] vhci_hcd: stop threads [ 351.194138][ T3763] vhci_hcd: release socket [ 351.198649][ T3763] vhci_hcd: disconnect device [ 351.233324][ T3763] vhci_hcd: stop threads [ 351.237699][ T3763] vhci_hcd: release socket [ 351.242149][ T3763] vhci_hcd: disconnect device [ 351.251388][T14439] RDS/IB: syz!: added [ 351.253129][ T3763] vhci_hcd: stop threads [ 351.259950][ T3763] vhci_hcd: release socket [ 351.264409][ T3763] vhci_hcd: disconnect device [ 351.302355][T14439] smc: adding ib device syz! with port count 1 [ 351.309257][T14439] smc: ib device syz! port 1 has pnetid [ 351.365463][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 351.403355][T14449] lo speed is unknown, defaulting to 1000 [ 351.499944][T14470] loop3: detected capacity change from 0 to 1024 [ 351.509520][T14470] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 351.520439][T14470] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 351.535460][T14470] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 351.548754][T14470] EXT4-fs (loop3): invalid journal inode [ 351.554518][T14470] EXT4-fs (loop3): can't get journal size [ 351.562756][T14470] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.3737: blocks 2-2 from inode overlap system zone [ 351.571475][T14449] lo speed is unknown, defaulting to 1000 [ 351.579006][T14470] EXT4-fs (loop3): failed to initialize system zone (-117) [ 351.592404][T14470] EXT4-fs (loop3): mount failed [ 351.650361][T12714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.718402][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3739'. [ 351.755221][T14449] chnl_net:caif_netlink_parms(): no params data found [ 351.768026][T14479] loop1: detected capacity change from 0 to 512 [ 351.781960][T14479] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.3740: casefold flag without casefold feature [ 351.803843][T14479] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.3740: couldn't read orphan inode 15 (err -117) [ 351.822982][T14479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.842553][T14485] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3741'. [ 351.901413][T14449] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.908592][T14449] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.917970][T12714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.930329][T14449] bridge_slave_0: entered allmulticast mode [ 351.944244][T14449] bridge_slave_0: entered promiscuous mode [ 351.951549][ T29] kauditd_printk_skb: 558 callbacks suppressed [ 351.951564][ T29] audit: type=1400 audit(1753543515.512:45024): avc: denied { create } for pid=14488 comm="syz.1.3742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 351.978029][T14449] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.986319][T14449] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.993402][ T29] audit: type=1400 audit(1753543515.512:45025): avc: denied { setopt } for pid=14488 comm="syz.1.3742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 352.007372][T14449] bridge_slave_1: entered allmulticast mode [ 352.013652][ T29] audit: type=1400 audit(1753543515.512:45026): avc: denied { getopt } for pid=14488 comm="syz.1.3742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 352.041695][T14449] bridge_slave_1: entered promiscuous mode [ 352.055337][ T29] audit: type=1326 audit(1753543515.602:45027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14490 comm="syz.1.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545bcee9a9 code=0x7ffc0000 [ 352.079125][ T29] audit: type=1326 audit(1753543515.602:45028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14490 comm="syz.1.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545bcee9a9 code=0x7ffc0000 [ 352.107896][ T29] audit: type=1326 audit(1753543515.652:45029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14490 comm="syz.1.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f545bcee9a9 code=0x7ffc0000 [ 352.131540][ T29] audit: type=1326 audit(1753543515.652:45030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14490 comm="syz.1.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545bcee9a9 code=0x7ffc0000 [ 352.155149][ T29] audit: type=1326 audit(1753543515.652:45031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14490 comm="syz.1.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545bcee9a9 code=0x7ffc0000 [ 352.178849][ T29] audit: type=1326 audit(1753543515.652:45032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14490 comm="syz.1.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f545bcee9a9 code=0x7ffc0000 [ 352.202458][ T29] audit: type=1326 audit(1753543515.652:45033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14490 comm="syz.1.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545bcee9a9 code=0x7ffc0000 [ 352.249695][T14449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.274054][T14449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.301698][T14449] team0: Port device team_slave_0 added [ 352.311059][T14449] team0: Port device team_slave_1 added [ 352.330982][T14449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.338692][T14449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.365977][T14449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.393153][T14449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.400787][T14449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.427975][T14449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.435406][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 352.474728][T14449] hsr_slave_0: entered promiscuous mode [ 352.482681][T14449] hsr_slave_1: entered promiscuous mode [ 352.491897][T14449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.499791][T14449] Cannot create hsr debugfs directory [ 352.526437][T14501] loop6: detected capacity change from 0 to 1024 [ 352.540065][T14501] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 352.550999][T14501] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 352.562326][T14501] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 352.577123][T14501] EXT4-fs (loop6): invalid journal inode [ 352.583817][T14501] EXT4-fs (loop6): can't get journal size [ 352.591666][T14501] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #3: comm syz.6.3747: blocks 2-2 from inode overlap system zone [ 352.607712][T14501] EXT4-fs (loop6): failed to initialize system zone (-117) [ 352.615080][T14501] EXT4-fs (loop6): mount failed [ 352.658148][T14504] lo speed is unknown, defaulting to 1000 [ 352.705156][T14449] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 352.720523][T14449] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 352.733254][T14449] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 352.746613][T14504] lo speed is unknown, defaulting to 1000 [ 352.761175][T14449] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 352.838711][T14449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.857132][T14449] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.867487][ T8678] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.874726][ T8678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.893301][ T8676] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.893836][T14531] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3756'. [ 352.900449][ T8676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.978127][T14449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.088030][T14449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.225438][T14449] veth0_vlan: entered promiscuous mode [ 353.234515][T14449] veth1_vlan: entered promiscuous mode [ 353.261065][T14449] veth0_macvtap: entered promiscuous mode [ 353.271642][T14449] veth1_macvtap: entered promiscuous mode [ 353.287167][T14449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.302456][T14449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.312915][T14449] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.321864][T14449] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.330629][T14449] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.339419][T14449] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.393969][T14568] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3730'. [ 353.446202][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 353.487809][T14573] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3761'. [ 353.497240][T14574] loop5: detected capacity change from 0 to 1024 [ 353.504176][T14574] EXT4-fs: Ignoring removed nobh option [ 353.511112][T14574] EXT4-fs: Ignoring removed bh option [ 353.529777][T14574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.547164][T14574] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3762'. [ 353.557153][T14574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3762'. [ 353.567394][T14574] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3762'. [ 354.142607][T14585] loop1: detected capacity change from 0 to 2048 [ 354.208227][T14585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.254357][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3771'. [ 354.274979][T14603] FAULT_INJECTION: forcing a failure. [ 354.274979][T14603] name failslab, interval 1, probability 0, space 0, times 0 [ 354.289048][T14603] CPU: 0 UID: 0 PID: 14603 Comm: syz.3.3772 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 354.289138][T14603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 354.289151][T14603] Call Trace: [ 354.289156][T14603] [ 354.289163][T14603] __dump_stack+0x1d/0x30 [ 354.289188][T14603] dump_stack_lvl+0xe8/0x140 [ 354.289213][T14603] dump_stack+0x15/0x1b [ 354.289282][T14603] should_fail_ex+0x265/0x280 [ 354.289312][T14603] should_failslab+0x8c/0xb0 [ 354.289361][T14603] kmem_cache_alloc_node_noprof+0x57/0x320 [ 354.289469][T14603] ? __alloc_skb+0x101/0x320 [ 354.289500][T14603] __alloc_skb+0x101/0x320 [ 354.289605][T14603] ? radix_tree_lookup+0xfa/0x140 [ 354.289633][T14603] netlink_ack+0xfd/0x500 [ 354.289672][T14603] netlink_rcv_skb+0x192/0x220 [ 354.289785][T14603] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.289821][T14603] genl_rcv+0x28/0x40 [ 354.289843][T14603] netlink_unicast+0x5a8/0x680 [ 354.289872][T14603] netlink_sendmsg+0x58b/0x6b0 [ 354.289977][T14603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.289994][T14603] __sock_sendmsg+0x142/0x180 [ 354.290019][T14603] ____sys_sendmsg+0x31e/0x4e0 [ 354.290090][T14603] ___sys_sendmsg+0x17b/0x1d0 [ 354.290136][T14603] __x64_sys_sendmsg+0xd4/0x160 [ 354.290160][T14603] x64_sys_call+0x2999/0x2fb0 [ 354.290179][T14603] do_syscall_64+0xd2/0x200 [ 354.290231][T14603] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 354.290295][T14603] ? clear_bhb_loop+0x40/0x90 [ 354.290381][T14603] ? clear_bhb_loop+0x40/0x90 [ 354.290406][T14603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.290463][T14603] RIP: 0033:0x7f5107c5e9a9 [ 354.290480][T14603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.290495][T14603] RSP: 002b:00007f51062bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.290512][T14603] RAX: ffffffffffffffda RBX: 00007f5107e85fa0 RCX: 00007f5107c5e9a9 [ 354.290523][T14603] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 354.290577][T14603] RBP: 00007f51062bf090 R08: 0000000000000000 R09: 0000000000000000 [ 354.290589][T14603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.290649][T14603] R13: 0000000000000000 R14: 00007f5107e85fa0 R15: 00007ffeb6bf7348 [ 354.290666][T14603] [ 354.505434][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 354.581770][T12906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.601238][T12714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.706749][T14627] loop7: detected capacity change from 0 to 512 [ 354.716499][T14627] EXT4-fs: Ignoring removed orlov option [ 354.723520][T14630] FAULT_INJECTION: forcing a failure. [ 354.723520][T14630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.739715][T14630] CPU: 0 UID: 0 PID: 14630 Comm: syz.6.3782 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 354.739818][T14630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 354.739831][T14630] Call Trace: [ 354.739837][T14630] [ 354.739844][T14630] __dump_stack+0x1d/0x30 [ 354.739869][T14630] dump_stack_lvl+0xe8/0x140 [ 354.739889][T14630] dump_stack+0x15/0x1b [ 354.739918][T14630] should_fail_ex+0x265/0x280 [ 354.739953][T14630] should_fail+0xb/0x20 [ 354.740034][T14630] should_fail_usercopy+0x1a/0x20 [ 354.740067][T14630] _copy_from_user+0x1c/0xb0 [ 354.740131][T14630] __sys_bind+0x106/0x2a0 [ 354.740162][T14630] __x64_sys_bind+0x3f/0x50 [ 354.740237][T14630] x64_sys_call+0x2086/0x2fb0 [ 354.740294][T14630] do_syscall_64+0xd2/0x200 [ 354.740315][T14630] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 354.740385][T14630] ? clear_bhb_loop+0x40/0x90 [ 354.740412][T14630] ? clear_bhb_loop+0x40/0x90 [ 354.740437][T14630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.740464][T14630] RIP: 0033:0x7f505d9ee9a9 [ 354.740483][T14630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.740506][T14630] RSP: 002b:00007f505c057038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 354.740570][T14630] RAX: ffffffffffffffda RBX: 00007f505dc15fa0 RCX: 00007f505d9ee9a9 [ 354.740586][T14630] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000006 [ 354.740599][T14630] RBP: 00007f505c057090 R08: 0000000000000000 R09: 0000000000000000 [ 354.740621][T14630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.740648][T14630] R13: 0000000000000000 R14: 00007f505dc15fa0 R15: 00007ffcc729f578 [ 354.740683][T14630] [ 354.743823][T14627] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 354.891029][T14636] loop6: detected capacity change from 0 to 1024 [ 354.926762][T14627] EXT4-fs (loop7): orphan cleanup on readonly fs [ 354.941525][T14636] EXT4-fs: Ignoring removed nobh option [ 354.948016][T14627] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3781: bg 0: block 248: padding at end of block bitmap is not set [ 354.948345][T14636] EXT4-fs: Ignoring removed bh option [ 354.964326][T14627] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3781: Failed to acquire dquot type 1 [ 354.981196][T14627] EXT4-fs (loop7): 1 truncate cleaned up [ 354.990582][T14627] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 355.007956][T14636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.021583][T14627] EXT4-fs: Ignoring removed orlov option [ 355.033170][T14633] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3783'. [ 355.042191][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3783'. [ 355.051130][T14633] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3783'. [ 355.051445][T14627] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 355.073444][T14627] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 355.092849][T14627] EXT4-fs error (device loop7): __ext4_remount:6736: comm syz.7.3781: Abort forced by user [ 355.107590][T14627] EXT4-fs (loop7): Remounting filesystem read-only [ 355.114163][T14627] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 355.129873][T14627] ext4 filesystem being remounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.150503][T14627] SELinux: syz.7.3781 (14627) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 355.199530][T14449] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.503336][T14656] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 355.535585][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 355.611452][ T9] usb 3-1: enqueue for inactive port 0 [ 355.617925][ T9] usb 3-1: enqueue for inactive port 0 [ 355.685925][T14245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.691432][ T9] vhci_hcd: vhci_device speed not set [ 355.874747][T14669] pim6reg1: entered promiscuous mode [ 355.971096][T14676] loop6: detected capacity change from 0 to 512 [ 355.979526][T14676] EXT4-fs: Ignoring removed orlov option [ 355.987208][T14676] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 356.000230][T14676] EXT4-fs (loop6): orphan cleanup on readonly fs [ 356.017868][T14676] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3795: bg 0: block 248: padding at end of block bitmap is not set [ 356.033292][T14676] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3795: Failed to acquire dquot type 1 [ 356.047163][T14676] EXT4-fs (loop6): 1 truncate cleaned up [ 356.053376][T14676] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 356.069428][T14676] EXT4-fs: Ignoring removed orlov option [ 356.075180][T14676] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 356.084834][T14676] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 356.110077][T14676] EXT4-fs error (device loop6): __ext4_remount:6736: comm syz.6.3795: Abort forced by user [ 356.122504][T14676] EXT4-fs (loop6): Remounting filesystem read-only [ 356.129102][T14676] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 356.137709][T14676] ext4 filesystem being remounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 356.149088][T14676] SELinux: syz.6.3795 (14676) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 356.178310][T14245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.178870][T14685] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 356.195629][T14685] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 356.279520][T14691] loop7: detected capacity change from 0 to 1024 [ 356.286698][T14691] EXT4-fs: Ignoring removed nobh option [ 356.292297][T14691] EXT4-fs: Ignoring removed bh option [ 356.307300][T14691] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.512734][T14705] pim6reg1: entered promiscuous mode [ 356.575425][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 356.763819][T14713] pim6reg1: entered promiscuous mode [ 356.812011][T14717] loop5: detected capacity change from 0 to 128 [ 356.823892][T14717] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 356.833102][T14717] FAT-fs (loop5): Filesystem has been set read-only [ 356.840329][T14717] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 356.852936][T14717] SELinux: syz.5.3809 (14717) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 357.103192][T14717] wireguard0: entered promiscuous mode [ 357.110432][T14717] wireguard0: entered allmulticast mode [ 357.120168][T14726] loop3: detected capacity change from 0 to 128 [ 357.144690][T14724] loop1: detected capacity change from 0 to 512 [ 357.285723][ T29] kauditd_printk_skb: 883 callbacks suppressed [ 357.285740][ T29] audit: type=1326 audit(1753543520.742:45913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14725 comm="syz.6.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505d9ee9a9 code=0x7ffc0000 [ 357.315649][ T29] audit: type=1326 audit(1753543520.742:45914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14725 comm="syz.6.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505d9ee9a9 code=0x7ffc0000 [ 357.339298][ T29] audit: type=1326 audit(1753543520.742:45915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14725 comm="syz.6.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505d9ee9a9 code=0x7ffc0000 [ 357.362876][ T29] audit: type=1326 audit(1753543520.742:45916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14725 comm="syz.6.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505d9ee9a9 code=0x7ffc0000 [ 357.386455][ T29] audit: type=1326 audit(1753543520.742:45917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14725 comm="syz.6.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505d9ee9a9 code=0x7ffc0000 [ 357.410055][ T29] audit: type=1326 audit(1753543520.742:45918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14725 comm="syz.6.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505d9ee9a9 code=0x7ffc0000 [ 357.433744][ T29] audit: type=1326 audit(1753543520.752:45919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14725 comm="syz.6.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505d9ee9a9 code=0x7ffc0000 [ 357.457555][ T29] audit: type=1326 audit(1753543520.752:45920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14725 comm="syz.6.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505d9ee9a9 code=0x7ffc0000 [ 357.481221][ T29] audit: type=1326 audit(1753543520.752:45921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14725 comm="syz.6.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f505d9ee9a9 code=0x7ffc0000 [ 357.504810][ T29] audit: type=1326 audit(1753543520.762:45922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14725 comm="syz.6.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505d9ee9a9 code=0x7ffc0000 [ 357.607994][T14724] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.3821: casefold flag without casefold feature [ 357.620767][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 357.647137][T14449] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.665281][T14724] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.3821: couldn't read orphan inode 15 (err -117) [ 357.681665][T14724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.883852][T12714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.053053][T14740] __nla_validate_parse: 11 callbacks suppressed [ 358.053078][T14740] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3813'. [ 358.082875][T14744] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3817'. [ 358.135054][T14740] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3813'. [ 358.184716][T14740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3813'. [ 358.196733][T14747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.209327][T14742] pim6reg1: entered promiscuous mode [ 358.250448][T14747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.372696][T14754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3818'. [ 358.540461][T14760] pim6reg1: entered promiscuous mode [ 358.595739][T14763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3822'. [ 358.645436][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 358.698834][T14772] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3824'. [ 358.715264][T14771] loop6: detected capacity change from 0 to 512 [ 358.731126][T14771] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.3825: casefold flag without casefold feature [ 358.751362][T14771] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.3825: couldn't read orphan inode 15 (err -117) [ 358.763847][T14771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.797304][T14245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.926933][T14788] loop6: detected capacity change from 0 to 1024 [ 358.934217][T14788] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 358.945229][T14788] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 358.957626][T14788] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 358.981665][T14788] EXT4-fs (loop6): invalid journal inode [ 359.005716][T14788] EXT4-fs (loop6): can't get journal size [ 359.018073][T14790] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3831'. [ 359.056904][T14788] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #3: comm syz.6.3830: blocks 2-2 from inode overlap system zone [ 359.073881][T14796] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3833'. [ 359.083152][T14788] EXT4-fs (loop6): failed to initialize system zone (-117) [ 359.094597][T14788] EXT4-fs (loop6): mount failed [ 359.285081][T14802] pim6reg1: entered promiscuous mode [ 359.513312][T14818] loop1: detected capacity change from 0 to 1024 [ 359.521345][T14818] EXT4-fs: Ignoring removed orlov option [ 359.535128][T14818] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #3: comm syz.1.3842: iget: bad extended attribute block 63324 [ 359.549940][T14818] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.3842: Bad quota inode: 3, type: 0 [ 359.571071][T14824] loop7: detected capacity change from 0 to 1024 [ 359.580288][T14824] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 359.583776][T14818] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 359.591337][T14824] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 359.609679][T14818] EXT4-fs (loop1): mount failed [ 359.616008][T14824] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 359.638092][T14824] EXT4-fs (loop7): invalid journal inode [ 359.645058][T14827] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3845'. [ 359.654090][T14824] EXT4-fs (loop7): can't get journal size [ 359.654371][T14824] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #3: comm syz.7.3844: blocks 2-2 from inode overlap system zone [ 359.662817][T14827] tipc: Started in network mode [ 359.680037][T14827] tipc: Node identity ac14140f, cluster identity 4711 [ 359.691072][T14824] EXT4-fs (loop7): failed to initialize system zone (-117) [ 359.695419][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 359.703586][T14824] EXT4-fs (loop7): mount failed [ 359.707462][T14827] tipc: New replicast peer: 255.255.255.255 [ 359.716303][T14827] tipc: Enabled bearer , priority 10 [ 359.860990][T14845] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 359.876843][T14847] loop3: detected capacity change from 0 to 512 [ 359.885105][T14847] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.3852: casefold flag without casefold feature [ 359.898239][T14847] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3852: couldn't read orphan inode 15 (err -117) [ 359.910860][T14847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.989600][T14850] lo speed is unknown, defaulting to 1000 [ 360.028364][T14850] lo speed is unknown, defaulting to 1000 [ 360.230156][T14860] loop5: detected capacity change from 0 to 1024 [ 360.247620][T14860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.259809][T14860] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.271737][T14860] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 360.286650][T14860] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 360.299099][T14860] EXT4-fs (loop5): This should not happen!! Data will be lost [ 360.299099][T14860] [ 360.308845][T14860] EXT4-fs (loop5): Total free blocks count 0 [ 360.314921][T14860] EXT4-fs (loop5): Free/Dirty block details [ 360.320896][T14860] EXT4-fs (loop5): free_blocks=4293918720 [ 360.326653][T14860] EXT4-fs (loop5): dirty_blocks=16 [ 360.331876][T14860] EXT4-fs (loop5): Block reservation details [ 360.337885][T14860] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 360.346934][T14860] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14860 comm=syz.5.3856 [ 360.360325][T14860] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2560 sclass=netlink_tcpdiag_socket pid=14860 comm=syz.5.3856 [ 360.373339][T14860] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2582 sclass=netlink_tcpdiag_socket pid=14860 comm=syz.5.3856 [ 360.387595][T14860] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2582 sclass=netlink_tcpdiag_socket pid=14860 comm=syz.5.3856 [ 360.473875][T12906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.688470][T14873] loop5: detected capacity change from 0 to 128 [ 360.725387][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 360.845390][ T1035] tipc: Node number set to 2886997007 [ 361.632737][T11673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.765392][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 362.142257][T14918] loop3: detected capacity change from 0 to 128 [ 362.214109][T14916] pim6reg1: entered promiscuous mode [ 362.368486][T14922] pim6reg1: entered promiscuous mode [ 362.378748][ T29] kauditd_printk_skb: 781 callbacks suppressed [ 362.378771][ T29] audit: type=1326 audit(1753543525.932:46704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14919 comm="syz.5.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab62de9a9 code=0x7ffc0000 [ 362.593485][ T29] audit: type=1326 audit(1753543525.962:46705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14919 comm="syz.5.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab62de9a9 code=0x7ffc0000 [ 362.805490][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 362.877316][ T29] audit: type=1326 audit(1753543526.432:46706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14939 comm="syz.6.3888" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f505d9ee9a9 code=0x0 [ 363.340480][ T29] audit: type=1326 audit(1753543526.892:46707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14946 comm="syz.7.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf625e9a9 code=0x7ffc0000 [ 363.536143][T14944] loop5: detected capacity change from 0 to 128 [ 363.846542][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 363.939753][T14956] FAULT_INJECTION: forcing a failure. [ 363.939753][T14956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.952961][T14956] CPU: 1 UID: 0 PID: 14956 Comm: syz.6.3893 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 363.952989][T14956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 363.953045][T14956] Call Trace: [ 363.953052][T14956] [ 363.953060][T14956] __dump_stack+0x1d/0x30 [ 363.953086][T14956] dump_stack_lvl+0xe8/0x140 [ 363.953110][T14956] dump_stack+0x15/0x1b [ 363.953126][T14956] should_fail_ex+0x265/0x280 [ 363.953154][T14956] should_fail+0xb/0x20 [ 363.953240][T14956] should_fail_usercopy+0x1a/0x20 [ 363.953271][T14956] strncpy_from_user+0x25/0x230 [ 363.953296][T14956] ? kmem_cache_alloc_noprof+0x186/0x310 [ 363.953379][T14956] ? getname_flags+0x80/0x3b0 [ 363.953399][T14956] getname_flags+0xae/0x3b0 [ 363.953418][T14956] path_setxattrat+0x223/0x310 [ 363.953459][T14956] __x64_sys_lsetxattr+0x71/0x90 [ 363.953532][T14956] x64_sys_call+0x1e36/0x2fb0 [ 363.953639][T14956] do_syscall_64+0xd2/0x200 [ 363.953656][T14956] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 363.953680][T14956] ? clear_bhb_loop+0x40/0x90 [ 363.953793][T14956] ? clear_bhb_loop+0x40/0x90 [ 363.953892][T14956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.953909][T14956] RIP: 0033:0x7f505d9ee9a9 [ 363.953924][T14956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.953944][T14956] RSP: 002b:00007f505c057038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 363.953964][T14956] RAX: ffffffffffffffda RBX: 00007f505dc15fa0 RCX: 00007f505d9ee9a9 [ 363.953978][T14956] RDX: 0000200000000280 RSI: 0000200000000000 RDI: 0000200000000400 [ 363.953991][T14956] RBP: 00007f505c057090 R08: 0000000000000000 R09: 0000000000000000 [ 363.954043][T14956] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 363.954052][T14956] R13: 0000000000000000 R14: 00007f505dc15fa0 R15: 00007ffcc729f578 [ 363.954068][T14956] [ 364.227607][T14959] pim6reg1: entered promiscuous mode [ 364.260609][ T29] audit: type=1326 audit(1753543527.452:46708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14946 comm="syz.7.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabf625e9a9 code=0x7ffc0000 [ 364.284286][ T29] audit: type=1326 audit(1753543527.452:46709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14946 comm="syz.7.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf625e9a9 code=0x7ffc0000 [ 364.307946][ T29] audit: type=1326 audit(1753543527.452:46710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14946 comm="syz.7.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf625e9a9 code=0x7ffc0000 [ 364.331708][ T29] audit: type=1326 audit(1753543527.462:46711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14946 comm="syz.7.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabf625e9a9 code=0x7ffc0000 [ 364.355386][ T29] audit: type=1326 audit(1753543527.462:46712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14946 comm="syz.7.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf625e9a9 code=0x7ffc0000 [ 364.379059][ T29] audit: type=1326 audit(1753543527.462:46713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14946 comm="syz.7.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fabf625d310 code=0x7ffc0000 [ 364.442750][T14964] __nla_validate_parse: 5 callbacks suppressed [ 364.442842][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3896'. [ 364.537177][T14973] loop7: detected capacity change from 0 to 512 [ 364.544901][T14973] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.3900: casefold flag without casefold feature [ 364.563043][T14973] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3900: couldn't read orphan inode 15 (err -117) [ 364.577748][T14973] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.677628][T14449] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.691432][T14987] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3902'. [ 364.887009][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 364.906434][T14998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3910'. [ 364.951615][T15002] loop1: detected capacity change from 0 to 512 [ 364.983458][T15002] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.3912: casefold flag without casefold feature [ 365.019324][T15002] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.3912: couldn't read orphan inode 15 (err -117) [ 365.042280][T15002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.043066][T15004] pim6reg1: entered promiscuous mode [ 365.232130][T12714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.275740][ T1035] Process accounting resumed [ 365.290808][T15023] loop1: detected capacity change from 0 to 512 [ 365.302243][T15023] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.3917: casefold flag without casefold feature [ 365.413215][T15023] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.3917: couldn't read orphan inode 15 (err -117) [ 365.447031][T15023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.481521][T12714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.621216][T15042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3923'. [ 365.858523][T15049] loop1: detected capacity change from 0 to 128 [ 365.925406][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 366.446574][T15062] loop3: detected capacity change from 0 to 512 [ 366.476907][T15062] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.3930: casefold flag without casefold feature [ 366.544237][T15062] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3930: couldn't read orphan inode 15 (err -117) [ 366.572787][T15062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.647452][T15065] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3931'. [ 366.670440][T11673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.965449][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 367.051480][T15078] xt_CT: You must specify a L4 protocol and not use inversions on it [ 367.197164][T15086] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3939'. [ 367.222342][ T1035] IPVS: starting estimator thread 0... [ 367.315494][T15088] IPVS: using max 2688 ests per chain, 134400 per kthread [ 367.413464][ T29] kauditd_printk_skb: 490 callbacks suppressed [ 367.413481][ T29] audit: type=1400 audit(1753543530.962:47204): avc: denied { create } for pid=15095 comm="syz.1.3941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 367.448588][ T29] audit: type=1400 audit(1753543530.992:47205): avc: denied { setopt } for pid=15095 comm="syz.1.3941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 367.468533][ T29] audit: type=1400 audit(1753543530.992:47206): avc: denied { create } for pid=15095 comm="syz.1.3941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 367.490837][ T29] audit: type=1400 audit(1753543531.002:47207): avc: denied { ioctl } for pid=15095 comm="syz.1.3941" path="socket:[43793]" dev="sockfs" ino=43793 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 367.517118][ T29] audit: type=1400 audit(1753543531.002:47208): avc: denied { bind } for pid=15095 comm="syz.1.3941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 367.645800][T15104] loop5: detected capacity change from 0 to 128 [ 367.661069][ T29] audit: type=1400 audit(1753543531.212:47209): avc: denied { write } for pid=15098 comm="syz.5.3942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 367.759319][ T29] audit: type=1400 audit(1753543531.302:47210): avc: denied { allowed } for pid=15105 comm="syz.7.3944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 367.934452][ T29] audit: type=1326 audit(1753543531.342:47211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15107 comm="syz.3.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 367.958315][ T29] audit: type=1326 audit(1753543531.342:47212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15107 comm="syz.3.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5107c5e9a9 code=0x7ffc0000 [ 367.981929][ T29] audit: type=1400 audit(1753543531.342:47213): avc: denied { create } for pid=15105 comm="syz.7.3944" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 368.005388][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 368.243869][T15116] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3948'. [ 368.383839][T15123] loop3: detected capacity change from 0 to 1024 [ 368.420736][T15123] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 368.431771][T15123] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 368.449460][T15123] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 368.462040][T15123] EXT4-fs (loop3): invalid journal inode [ 368.497157][T15123] EXT4-fs (loop3): can't get journal size [ 368.527408][T15123] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.3952: blocks 2-2 from inode overlap system zone [ 368.574301][T15123] EXT4-fs (loop3): failed to initialize system zone (-117) [ 368.602511][T15123] EXT4-fs (loop3): mount failed [ 368.658981][T15129] pim6reg1: entered promiscuous mode [ 368.743307][T15134] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3955'. [ 369.045447][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 369.114117][T15121] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3951'. [ 369.147695][T15121] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15121 comm=syz.1.3951 [ 369.450581][T15164] 9pnet_fd: Insufficient options for proto=fd [ 369.461365][T15164] loop6: detected capacity change from 0 to 1024 [ 369.468571][T15164] ext4: Unknown parameter 'subj_type' [ 369.475021][T15168] loop7: detected capacity change from 0 to 512 [ 369.484386][T15168] EXT4-fs: Ignoring removed orlov option [ 369.505808][T15168] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 369.521241][T15168] EXT4-fs (loop7): orphan cleanup on readonly fs [ 369.528434][T15168] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3967: bg 0: block 248: padding at end of block bitmap is not set [ 369.542977][T15168] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3967: Failed to acquire dquot type 1 [ 369.573524][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3969'. [ 369.585097][T15168] EXT4-fs (loop7): 1 truncate cleaned up [ 369.600088][T15168] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 369.619854][T15168] EXT4-fs: Ignoring removed orlov option [ 369.637193][T15177] netlink: 'syz.1.3970': attribute type 10 has an invalid length. [ 369.648235][T15168] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 369.664462][T15177] team0 (unregistering): Port device team_slave_0 removed [ 369.672525][T15168] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 369.686923][T15177] team0 (unregistering): Port device team_slave_1 removed [ 369.709777][T15168] EXT4-fs error (device loop7): __ext4_remount:6736: comm syz.7.3967: Abort forced by user [ 369.720339][T15168] EXT4-fs (loop7): Remounting filesystem read-only [ 369.726923][T15168] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 369.735484][T15168] ext4 filesystem being remounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 369.748077][T15168] SELinux: syz.7.3967 (15168) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 369.797050][T15183] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3972'. [ 369.808531][T15181] loop6: detected capacity change from 0 to 128 [ 369.827462][T14449] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.869244][T15185] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3973'. [ 369.942464][T15188] loop7: detected capacity change from 0 to 1024 [ 369.968691][T15188] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 369.981320][T15188] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 369.996061][T15188] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 370.016039][T15188] EXT4-fs (loop7): invalid journal inode [ 370.021995][T15188] EXT4-fs (loop7): can't get journal size [ 370.030058][T15188] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #3: comm syz.7.3974: blocks 2-2 from inode overlap system zone [ 370.049454][T15188] EXT4-fs (loop7): failed to initialize system zone (-117) [ 370.057598][T15188] EXT4-fs (loop7): mount failed [ 370.085416][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 370.198588][T15195] pim6reg1: entered promiscuous mode [ 370.335063][T15206] FAULT_INJECTION: forcing a failure. [ 370.335063][T15206] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 370.349743][T15206] CPU: 0 UID: 0 PID: 15206 Comm: syz.7.3979 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 370.349808][T15206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 370.349839][T15206] Call Trace: [ 370.349898][T15206] [ 370.349905][T15206] __dump_stack+0x1d/0x30 [ 370.349924][T15206] dump_stack_lvl+0xe8/0x140 [ 370.349977][T15206] dump_stack+0x15/0x1b [ 370.349991][T15206] should_fail_ex+0x265/0x280 [ 370.350025][T15206] should_fail_alloc_page+0xf2/0x100 [ 370.350095][T15206] __alloc_frozen_pages_noprof+0xff/0x360 [ 370.350144][T15206] alloc_pages_mpol+0xb3/0x250 [ 370.350255][T15206] vma_alloc_folio_noprof+0x1aa/0x300 [ 370.350330][T15206] handle_mm_fault+0xec2/0x2be0 [ 370.350349][T15206] ? mas_walk+0xf2/0x120 [ 370.350390][T15206] do_user_addr_fault+0x636/0x1090 [ 370.350477][T15206] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 370.350508][T15206] exc_page_fault+0x62/0xa0 [ 370.350614][T15206] asm_exc_page_fault+0x26/0x30 [ 370.350637][T15206] RIP: 0033:0x7fabf6120ca3 [ 370.350654][T15206] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 370.350675][T15206] RSP: 002b:00007fabf48c64a0 EFLAGS: 00010206 [ 370.350689][T15206] RAX: 0000000000008000 RBX: 00007fabf48c6540 RCX: 00007fabec4a7000 [ 370.350700][T15206] RDX: 00007fabf48c66e0 RSI: 000000000000001f RDI: 00007fabf48c65e0 [ 370.350710][T15206] RBP: 000000000000005f R08: 0000000000000009 R09: 00000000000001b4 [ 370.350778][T15206] R10: 00000000000001d0 R11: 00007fabf48c6540 R12: 0000000000000001 [ 370.350792][T15206] R13: 00007fabf62fc880 R14: 0000000000000027 R15: 00007fabf48c65e0 [ 370.350813][T15206] [ 370.350833][T15206] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 370.591331][T15206] loop7: detected capacity change from 0 to 512 [ 370.637752][T15206] EXT4-fs (loop7): too many log groups per flexible block group [ 370.646786][T15206] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 370.661774][T15206] EXT4-fs (loop7): mount failed [ 370.754173][T15208] pim6reg1: entered promiscuous mode [ 370.942275][T15235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3990'. [ 371.064842][T15231] pim6reg1: entered promiscuous mode [ 371.125454][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 371.172665][T15255] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 371.238347][T15263] pim6reg1: entered promiscuous mode [ 371.495875][T15282] loop5: detected capacity change from 0 to 128 [ 372.165636][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 372.267659][T15304] pim6reg1: entered promiscuous mode [ 372.439921][T15324] netlink: 'syz.1.4019': attribute type 3 has an invalid length. [ 372.447755][T15324] netlink: 1104 bytes leftover after parsing attributes in process `syz.1.4019'. [ 372.484486][ T29] kauditd_printk_skb: 638 callbacks suppressed [ 372.484517][ T29] audit: type=1400 audit(1753543536.032:47850): avc: denied { create } for pid=15323 comm="syz.1.4019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 372.532171][ T29] audit: type=1326 audit(1753543536.082:47851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15320 comm="syz.7.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fabf625e9a9 code=0x7ffc0000 [ 372.595676][ T29] audit: type=1326 audit(1753543536.152:47852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15316 comm="syz.7.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fabf61fab89 code=0x7ffc0000 [ 372.619403][ T29] audit: type=1326 audit(1753543536.152:47853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15316 comm="syz.7.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf625e9a9 code=0x7ffc0000 [ 372.643100][ T29] audit: type=1326 audit(1753543536.152:47854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15316 comm="syz.7.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf625e9a9 code=0x7ffc0000 [ 372.692740][T15328] FAULT_INJECTION: forcing a failure. [ 372.692740][T15328] name failslab, interval 1, probability 0, space 0, times 0 [ 372.705626][T15328] CPU: 1 UID: 0 PID: 15328 Comm: syz.6.4021 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 372.705655][T15328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 372.705668][T15328] Call Trace: [ 372.705675][T15328] [ 372.705682][T15328] __dump_stack+0x1d/0x30 [ 372.705701][T15328] dump_stack_lvl+0xe8/0x140 [ 372.705794][T15328] dump_stack+0x15/0x1b [ 372.705815][T15328] should_fail_ex+0x265/0x280 [ 372.705845][T15328] ? p9_client_create+0x59/0xbc0 [ 372.705907][T15328] should_failslab+0x8c/0xb0 [ 372.705939][T15328] __kmalloc_cache_noprof+0x4c/0x320 [ 372.706019][T15328] p9_client_create+0x59/0xbc0 [ 372.706046][T15328] ? should_failslab+0x8c/0xb0 [ 372.706066][T15328] ? __kmalloc_node_track_caller_noprof+0x1e5/0x410 [ 372.706097][T15328] ? v9fs_session_init+0x78/0xde0 [ 372.706211][T15328] v9fs_session_init+0xf7/0xde0 [ 372.706241][T15328] ? obj_cgroup_charge_account+0x122/0x1a0 [ 372.706280][T15328] ? __rcu_read_unlock+0x4f/0x70 [ 372.706300][T15328] ? should_fail_ex+0xdb/0x280 [ 372.706361][T15328] ? v9fs_mount+0x51/0x590 [ 372.706436][T15328] ? should_failslab+0x8c/0xb0 [ 372.706455][T15328] ? __kmalloc_cache_noprof+0x189/0x320 [ 372.706541][T15328] v9fs_mount+0x67/0x590 [ 372.706577][T15328] ? __pfx_v9fs_mount+0x10/0x10 [ 372.706604][T15328] legacy_get_tree+0x78/0xd0 [ 372.706640][T15328] vfs_get_tree+0x54/0x1d0 [ 372.706780][T15328] do_new_mount+0x207/0x680 [ 372.706823][T15328] path_mount+0x4a4/0xb20 [ 372.706853][T15328] ? user_path_at+0x109/0x130 [ 372.706904][T15328] __se_sys_mount+0x28f/0x2e0 [ 372.706953][T15328] ? fput+0x8f/0xc0 [ 372.706981][T15328] __x64_sys_mount+0x67/0x80 [ 372.707012][T15328] x64_sys_call+0xd36/0x2fb0 [ 372.707033][T15328] do_syscall_64+0xd2/0x200 [ 372.707120][T15328] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 372.707146][T15328] ? clear_bhb_loop+0x40/0x90 [ 372.707167][T15328] ? clear_bhb_loop+0x40/0x90 [ 372.707188][T15328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.707208][T15328] RIP: 0033:0x7f505d9ee9a9 [ 372.707222][T15328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.707324][T15328] RSP: 002b:00007f505c057038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 372.707346][T15328] RAX: ffffffffffffffda RBX: 00007f505dc15fa0 RCX: 00007f505d9ee9a9 [ 372.707358][T15328] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 372.707370][T15328] RBP: 00007f505c057090 R08: 0000200000000340 R09: 0000000000000000 [ 372.707383][T15328] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 372.707457][T15328] R13: 0000000000000000 R14: 00007f505dc15fa0 R15: 00007ffcc729f578 [ 372.707479][T15328] [ 373.120756][ T29] audit: type=1400 audit(1753543536.672:47855): avc: denied { ioctl } for pid=15341 comm="syz.5.4026" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 373.146508][ T29] audit: type=1400 audit(1753543536.672:47856): avc: denied { create } for pid=15343 comm="syz.7.4027" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 373.167438][ T29] audit: type=1400 audit(1753543536.672:47857): avc: denied { mounton } for pid=15343 comm="syz.7.4027" path="/53/file0" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 373.190731][ T29] audit: type=1400 audit(1753543536.722:47858): avc: denied { write } for pid=15343 comm="syz.7.4027" name="file0" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 373.213426][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 373.220632][ T29] audit: type=1400 audit(1753543536.722:47859): avc: denied { open } for pid=15343 comm="syz.7.4027" path="/53/file0" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 373.227561][T15348] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 373.285246][T15353] loop5: detected capacity change from 0 to 512 [ 373.300541][T15353] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 373.308770][T15353] System zones: 1-12 [ 373.314065][T15353] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.4029: error while reading EA inode 32 err=-116 [ 373.326677][T15353] EXT4-fs (loop5): Remounting filesystem read-only [ 373.333279][T15353] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 373.344048][T15353] EXT4-fs (loop5): 1 orphan inode deleted [ 373.350431][T15353] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.365265][T15353] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.477887][T15371] syz.3.4034: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 373.492688][T15371] CPU: 0 UID: 0 PID: 15371 Comm: syz.3.4034 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 373.492749][T15371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 373.492830][T15371] Call Trace: [ 373.492837][T15371] [ 373.492847][T15371] __dump_stack+0x1d/0x30 [ 373.492867][T15371] dump_stack_lvl+0xe8/0x140 [ 373.492884][T15371] dump_stack+0x15/0x1b [ 373.492898][T15371] warn_alloc+0x12b/0x1a0 [ 373.492951][T15371] __vmalloc_node_range_noprof+0x9c/0xe00 [ 373.492987][T15371] ? __futex_wait+0x1ff/0x260 [ 373.493022][T15371] ? __pfx_futex_wake_mark+0x10/0x10 [ 373.493178][T15371] ? __rcu_read_unlock+0x4f/0x70 [ 373.493201][T15371] ? avc_has_perm_noaudit+0x1b1/0x200 [ 373.493234][T15371] ? should_fail_ex+0x30/0x280 [ 373.493259][T15371] ? xskq_create+0x36/0xe0 [ 373.493294][T15371] vmalloc_user_noprof+0x7d/0xb0 [ 373.493327][T15371] ? xskq_create+0x80/0xe0 [ 373.493353][T15371] xskq_create+0x80/0xe0 [ 373.493375][T15371] xsk_init_queue+0x95/0xf0 [ 373.493400][T15371] xsk_setsockopt+0x35c/0x510 [ 373.493460][T15371] ? __pfx_xsk_setsockopt+0x10/0x10 [ 373.493477][T15371] __sys_setsockopt+0x181/0x200 [ 373.493532][T15371] __x64_sys_setsockopt+0x64/0x80 [ 373.493608][T15371] x64_sys_call+0x2bd5/0x2fb0 [ 373.493633][T15371] do_syscall_64+0xd2/0x200 [ 373.493702][T15371] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 373.493726][T15371] ? clear_bhb_loop+0x40/0x90 [ 373.493746][T15371] ? clear_bhb_loop+0x40/0x90 [ 373.493767][T15371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.493839][T15371] RIP: 0033:0x7f5107c5e9a9 [ 373.493855][T15371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.493876][T15371] RSP: 002b:00007f51062bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 373.493957][T15371] RAX: ffffffffffffffda RBX: 00007f5107e85fa0 RCX: 00007f5107c5e9a9 [ 373.493968][T15371] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 373.493979][T15371] RBP: 00007f5107ce0d69 R08: 0000000000000004 R09: 0000000000000000 [ 373.493989][T15371] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.494001][T15371] R13: 0000000000000000 R14: 00007f5107e85fa0 R15: 00007ffeb6bf7348 [ 373.494023][T15371] [ 373.720304][T15371] Mem-Info: [ 373.723756][T15371] active_anon:7087 inactive_anon:4 isolated_anon:0 [ 373.723756][T15371] active_file:23213 inactive_file:2658 isolated_file:0 [ 373.723756][T15371] unevictable:0 dirty:352 writeback:0 [ 373.723756][T15371] slab_reclaimable:3565 slab_unreclaimable:37826 [ 373.723756][T15371] mapped:34310 shmem:4169 pagetables:918 [ 373.723756][T15371] sec_pagetables:0 bounce:0 [ 373.723756][T15371] kernel_misc_reclaimable:0 [ 373.723756][T15371] free:1840690 free_pcp:17942 free_cma:0 [ 373.770346][T15371] Node 0 active_anon:28348kB inactive_anon:16kB active_file:92852kB inactive_file:10632kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137240kB dirty:1408kB writeback:0kB shmem:16676kB writeback_tmp:0kB kernel_stack:4432kB pagetables:3672kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 373.801028][T15371] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 373.831041][T15371] lowmem_reserve[]: 0 2882 7860 7860 [ 373.836518][T15371] Node 0 DMA32 free:2947720kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951348kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 373.868427][T15371] lowmem_reserve[]: 0 0 4978 4978 [ 373.873729][T15371] Node 0 Normal free:4399680kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28348kB inactive_anon:16kB active_file:92852kB inactive_file:10632kB unevictable:0kB writepending:1408kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:68144kB local_pcp:29004kB free_cma:0kB [ 373.907488][T15371] lowmem_reserve[]: 0 0 0 0 [ 373.912224][T15371] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 373.925127][T15371] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 2*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947720kB [ 373.942813][T15371] Node 0 Normal: 1709*4kB (UM) 238*8kB (UME) 61*16kB (ME) 145*32kB (UME) 349*64kB (UME) 156*128kB (UME) 75*256kB (UM) 43*512kB (UM) 49*1024kB (UME) 32*2048kB (UM) 1022*4096kB (UM) = 4399700kB [ 373.962176][T15371] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 373.973341][T15371] 29999 total pagecache pages [ 373.978243][T15371] 4 pages in swap cache [ 373.982578][T15371] Free swap = 124980kB [ 373.986986][T15371] Total swap = 124996kB [ 373.991373][T15371] 2097051 pages RAM [ 373.996909][T15371] 0 pages HighMem/MovableOnly [ 374.001768][T15371] 80814 pages reserved [ 374.185277][T15377] loop5: detected capacity change from 0 to 128 [ 374.245122][T15392] loop3: detected capacity change from 0 to 128 [ 374.251491][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 374.563526][T15403] loop6: detected capacity change from 0 to 1024 [ 374.609653][T15403] EXT4-fs: Ignoring removed nobh option [ 374.615268][T15403] EXT4-fs: Ignoring removed bh option [ 374.649207][T15407] loop5: detected capacity change from 0 to 512 [ 374.677983][T15407] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 374.698849][T15403] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.728727][T15407] System zones: 1-12 [ 374.748389][T15407] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.4043: error while reading EA inode 32 err=-116 [ 374.808143][T15407] EXT4-fs (loop5): Remounting filesystem read-only [ 374.814737][T15407] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 374.930365][T15407] EXT4-fs (loop5): 1 orphan inode deleted [ 374.952971][T15407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.998900][T15407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.241826][T15418] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4045'. [ 375.270379][T15419] loop1: detected capacity change from 0 to 1024 [ 375.277183][T15419] EXT4-fs: Ignoring removed nobh option [ 375.282771][T15419] EXT4-fs: Ignoring removed bh option [ 375.285472][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 375.435539][T14245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.478441][T15419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.693971][T15430] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4050'. [ 376.073879][T12714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.299061][T15446] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4056'. [ 376.316138][ T1035] IPVS: starting estimator thread 0... [ 376.323118][T15446] ================================================================== [ 376.331250][T15446] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 376.338303][T15446] [ 376.340649][T15446] read-write to 0xffff888237c1b254 of 4 bytes by interrupt on cpu 0: [ 376.348722][T15446] hrtimer_interrupt+0x70/0x460 [ 376.353586][T15446] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 376.359496][T15446] sysvec_apic_timer_interrupt+0x6f/0x80 [ 376.365172][T15446] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 376.371173][T15446] mutex_unlock+0xd/0x30 [ 376.375443][T15446] unix_stream_read_generic+0xb9f/0x13a0 [ 376.381093][T15446] unix_stream_recvmsg+0xc3/0xf0 [ 376.386039][T15446] sock_recvmsg+0x139/0x170 [ 376.390563][T15446] ____sys_recvmsg+0xf5/0x280 [ 376.395256][T15446] ___sys_recvmsg+0x11f/0x370 [ 376.399946][T15446] __x64_sys_recvmsg+0xd1/0x160 [ 376.404813][T15446] x64_sys_call+0xf19/0x2fb0 [ 376.409428][T15446] do_syscall_64+0xd2/0x200 [ 376.413963][T15446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.419873][T15446] [ 376.422206][T15446] read to 0xffff888237c1b254 of 4 bytes by task 15446 on cpu 1: [ 376.429845][T15446] print_cpu+0x359/0x680 [ 376.434099][T15446] timer_list_show+0x107/0x170 [ 376.438878][T15446] seq_read_iter+0x62a/0x940 [ 376.443483][T15446] proc_reg_read_iter+0x110/0x180 [ 376.448517][T15446] copy_splice_read+0x3c4/0x5f0 [ 376.453386][T15446] splice_direct_to_actor+0x26f/0x680 [ 376.458777][T15446] do_splice_direct+0xda/0x150 [ 376.463560][T15446] do_sendfile+0x380/0x650 [ 376.467989][T15446] __x64_sys_sendfile64+0x105/0x150 [ 376.473200][T15446] x64_sys_call+0xb39/0x2fb0 [ 376.477799][T15446] do_syscall_64+0xd2/0x200 [ 376.482311][T15446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.488220][T15446] [ 376.490540][T15446] value changed: 0x000a5a11 -> 0x000a5a12 [ 376.496254][T15446] [ 376.498580][T15446] Reported by Kernel Concurrency Sanitizer on: [ 376.504733][T15446] CPU: 1 UID: 0 PID: 15446 Comm: syz.5.4056 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 376.517245][T15446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 376.527314][T15446] ================================================================== [ 376.535468][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 376.605411][T15447] IPVS: using max 2688 ests per chain, 134400 per kthread [ 377.605483][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 378.645414][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 379.685510][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 380.725392][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 381.765617][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 382.805394][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 383.855476][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 384.885394][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 385.925502][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available